viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
infra/state/stacks/authentik/terraform.tfstate.enc

1103 lines
161 KiB
Text
Raw Normal View History

state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"version": "ENC[AES256_GCM,data:AQ==,iv:VC9JNxManyR5N0AaP+rHe4PJgG90YUrsEHE1TF1ExIw=,tag:aKC9JgddC/yD1Jeu7K25XA==,type:float]",
"terraform_version": "ENC[AES256_GCM,data:YgKeJUA=,iv:DFmf3MHZjhGGqFHx5/w9nD7vTJUWz8Ulf/OiwfGaSQE=,tag:ha43RRx68aXTdSiuoC1rxA==,type:str]",
"serial": "ENC[AES256_GCM,data:iQ==,iv:l5yd/F5d2poph6k+VDbUAbrgsgmyE9ya7yJHpwAeMto=,tag:0SeJxa5RX4vHBOTOyblcsQ==,type:float]",
"lineage": "ENC[AES256_GCM,data:OOn1ACgzV5ZTLU68tOGCBPbs9afXeQwFUmYlJ65+cTn3XUwQ,iv:IMQPDPcDQx/v9dS7b8eH+ZOE8mYvqLNe6M2B5TXjuCQ=,tag:8pyAXCFWqebP9rWTWBNKxg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"outputs": {},
"resources": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mode": "ENC[AES256_GCM,data:5q+jFQ==,iv:RMQ+FCukVzc1eZgkOTqS5dOpR7WoDcp8Up63I5xHB38=,tag:ybi10xQT5/ZFp5zP7GiPGg==,type:str]",
"type": "ENC[AES256_GCM,data:HED/XIyJ9eNDDORh7moL/yDW,iv:53oUtX/B5s8lIXSmOei7xVansmwLTMKuRg03IzenmFA=,tag:g6frz45E/VlL42b+r4clYQ==,type:str]",
"name": "ENC[AES256_GCM,data:rQgQ2NEB4w==,iv:49Mk3nSo1NUUGT6zQCPfzr8XG5RQorgBWom3okxadp0=,tag:UFntDFEMkSs3FcVuo1usSQ==,type:str]",
"provider": "ENC[AES256_GCM,data:UVFuby3b1iJKF6C4e12gQb6mxMgSd/V1cMESpEU6YxjWMABcqa8Cdm5CJPRx63U0Sw==,iv:PAyDMaMFgW15Tv1OhRWqVQFv+rRUG2DLVP/yIaO/q7A=,tag:fezjCzW/rK+/CSqLXa+KsQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:mQ==,iv:PU5WBeab36m0q3XwX7EmcqLbMU67BxP+Xwmhl/hOSbI=,tag:BlP3QYMQeFkvZj/w0HZTCA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"created_time": "ENC[AES256_GCM,data:03QE4wuQr/DRxvhr+Rqic9sMbp/EqQ3IMEKchXO5,iv:tw6IjyDtUf9DeTJRpkxTnHzjfvQkhaF21PfKVkCq70E=,tag:HhA9tg6yRwF2CE0FMwJRJA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"custom_metadata": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"alertmanager_account_password": "ENC[AES256_GCM,data:ufY0vpvQugl6l/Gzo4hZaZZQWpU=,iv:ilN610MXSLWSBpvwWs/cYXRPksdnHqXrEgIilQX5tE8=,tag:66vDfAA1bTIUcwn3x4HLig==,type:str]",
"alertmanager_slack_api_url": "ENC[AES256_GCM,data:l4JlJ4kmRLfCvwlJ016871H27qVJRVcMCAIASYsRyTCJdQ6VNCMjUVo2wQc3wjFybzMxqH62pk7Cf/eOh7NIr63fR66k+qKqjIYQCE9C2nJB,iv:a0zvQJ5oe7osEo9Uid9vyK/v8GEzov8w3V2Z6OIY1JA=,tag:ha5fHXRtehT+PotldWS/eg==,type:str]",
"auth_fallback_htpasswd": "ENC[AES256_GCM,data:+quUeOouam/wObhSQOc2Env7YUNCyhcERm3xZcIVQfUOcEtSbiqLlqsyst7RqhT8fTNZK3kMc9XZ6PwVjHnTITxq,iv:B87WdH2JirBdI7YO8z2U73x4F8BjXaMpSya/S2olq64=,tag:FFslqQCrFHQB5AG0uVQ1Ng==,type:str]",
"authentik_postgres_password": "ENC[AES256_GCM,data:MvwJ1KDDW5wY0ftu78QQuw==,iv:p/oBtpDIrZF4U4o0cTdHe7Sc1AnnYaEARa7nlaujqxk=,tag:FRWbXQxkUN31GEzRFBavYA==,type:str]",
"authentik_secret_key": "ENC[AES256_GCM,data:78LXDZEqsWjl40RXPVj00u/pDR/2tveHSaBOkZnUZt004NQj8fAQq4gELwy1VSZRmZMl,iv:sTwVv6QKmKZ0aYl7VtYMgakXW5pDMoSRa0yfolXVRq4=,tag:oEWBrKY2VYzd1LolnUb9DA==,type:str]",
"cloudflare_api_key": "ENC[AES256_GCM,data:mPDOddHFhREw5pLj9jmK5pjZ9bbkuKo9aWKw/Jzf92JUVNhUvg==,iv:niS6xxffiB7GKi4YXJJSDdQx84WaYqE5wEBhDzIa4UM=,tag:U5QWi7EyZf73EgZSQ9ZK6A==,type:str]",
"cloudflare_tunnel_token": "ENC[AES256_GCM,data:rf5iQn/cHhVE4wnBnyCshb2CxziM+YYRXa4WTYi4qYtv6NEYxMIvf6gbW3x30tp44ZGgUFi0cIqYSFS1xXUjA3lmOWHDZvslxWEE7GHdSJORey1U08Cg4+QfVH4KyLioqWybwhNbU2PtP7EKZcA46o+7oiq21OpEJBpx0OiuZjd0nyLpvo3dK9JX+vGxA4CJxHlRhCitgxHrjnvGeNey86rcah1ONawEScl6PLOxv0LjlyfeyYbdiA==,iv:iwGvhvh8cg8paIC96ZvAkDE1M0rYJ1Qi2faPFK1kvOg=,tag:goQDuctKQZm+G2UWEQnpDg==,type:str]",
"crowdsec_dash_api_key": "ENC[AES256_GCM,data:ISpCcTvuzRTSL+OQViOhgbuNJj3ns9lnn2eOVU/B+kvzmtuurswvgmHegQ==,iv:xyWduV3EzD/9NYXK9mrLHDPk+t1kwxhRHRKy9KCV9p0=,tag:5EFW1CRaB9c9dWV8IzIyrw==,type:str]",
"crowdsec_dash_machine_id": "ENC[AES256_GCM,data:BUs3w6JswUxpHxq9ucvThcdAoIu9KIRBTCEqLn0=,iv:jkpYCNo22zmnymovpjvsL4NzyQ6atrNnn+v0nZOJjH0=,tag:v1iB6XWAZ8EEaCUPrPLYEw==,type:str]",
"crowdsec_dash_machine_password": "ENC[AES256_GCM,data:sgoZT63ZCZ81cYQPFCCXDa8b6H3lajOuQqkV2qXmG3KqBkGG17zyk0bmgVzIXzXWE9zLBP+AxbXliq6xOmam+Q==,iv:Nr1BNTMq9ZkoJaOmKAz50eC8zg6zjZFBEtJbX+U7tB0=,tag:wD+MLRVRwvdOPD+hS6j0ng==,type:str]",
"crowdsec_db_password": "ENC[AES256_GCM,data:Rk+or6DxwBMOw895rJM=,iv:oVQrXMRCPBHHJoRsC2luQxd3J3gHeg+ojZ0HxRHswrs=,tag:1R4KuuJVuVP4LkoStKRYJQ==,type:str]",
"crowdsec_enroll_key": "ENC[AES256_GCM,data:Fd6P+Ev2bhe3INzmkU+mhzEnzWHKVlr0ug==,iv:rsw5jpiAQ7MOe/7X9cbowRWzC+SsBlkxh1+mBMuUvtc=,tag:RgHNBLj0C1/ZjWsdXdp2IQ==,type:str]",
"dbaas_pgadmin_password": "ENC[AES256_GCM,data:LyzTYA5qr/79jCZlgCiXPsUDUavDJ8gHvN/N4AVNRkI=,iv:kqxAzf4rLYXANTluWQXk8ubJzieNU+1UgQEFua6TGx4=,tag:48EHH64iaBtvcxtIn7tI3g==,type:str]",
"dbaas_postgresql_root_password": "ENC[AES256_GCM,data:j4OjCG0ALW43ogHcV7G2jyV4kIBnebP2Aq4=,iv:t+Xovdy2s5Y6LO472Jv5O8jshRGaz2j4bmmieEWyD5Q=,tag:M+QVLQrMgWfHaR7rY7f4GQ==,type:str]",
"dbaas_root_password": "ENC[AES256_GCM,data:yTH36fr5hnFLSFtO8oW/P5L7kbblg89PVuzt6A==,iv:sH3Qn2+evVjetUZpTp/eLRKWWJaMt9O+dO/V1T5dkWk=,tag:4by0fYCNuKZ88+idc9QTQw==,type:str]",
"grafana_admin_password": "ENC[AES256_GCM,data:NLmsrQ/Z74sQc5rUIbMn8ej5Eu8=,iv:Oym1pkWg82Q3W/4gR/8uQjngILNNZG5xAUV9T9stdm4=,tag:UHVZxPMnlvmxPqXf0f6CEw==,type:str]",
"grafana_db_password": "ENC[AES256_GCM,data:meBWRVxNNvE4o3GUaSTvjQJbNH+R,iv:yztYuF70xdQ0vdZK1N+XA+xQzdDiKnb2rqNPDgqmjM4=,tag:1TiZn/o0lo0olnQD6WWLLg==,type:str]",
"haos_api_token": "ENC[AES256_GCM,data:F5+QeoKAr6Xj41LBxfHn7nm0+NXSmCmgOLXep5c4q2GuJVtNuGoDEAYQ1FQntSA/ledmRgnp9QHyVTKs6ifkhukBUjjqDOByQtKjArfaW/PRZAMQiyVKFF8yfg/NpziOUFJjivVD14KSKhMsQtBq6mozZd9Xrd+QdPhE0mgFG0iXH8+2o0l/G3ltFcsh6E+banT0AjP6JuQRjX4nuUF+/iHRykWjhh8SqP4e7mhMyO8BxnkZD5Qr,iv:1IFCjKwlwPaG6hnGUx91Yxqb1f4Yl0oCByWEMAiCSMM=,tag:GC4lVvw49pUkbiNG4dVSGg==,type:str]",
"headscale_acl": "ENC[AES256_GCM,data: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
"headscale_config": "ENC[AES256_GCM,data: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
"homepage_credentials": "ENC[AES256_GCM,data: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,iv:/8BoMGzYKNkUNXtvMyHBtxzlZFm48EteHF3BLeznaFs=,tag:JkCUctjtGJQHR+3XQWABLQ==,type:str]",
"ingress_crowdsec_api_key": "ENC[AES256_GCM,data:kBDcSY29zUo6iOmJI0HK5nw18chS2FZIkHH3C26ed9YvtOwVJgGn581uFA==,iv:mcK++Pa1Nrv/PPx2RJ11CMpBQH38Zwd7vFlbZTQhtAg=,tag:4lQKYH8JvYQRD421v9tIxw==,type:str]",
"k8s_users": "ENC[AES256_GCM,data:7HmTmzdOd7Sny1iELS62nYuQMw6wUHGwunexRKceKCa6xeX1jyqjqZnr9MbP1v/9YoqDdCLCaf4UWTl1IK52WCx+baAS8j1FhCf9rMULXe9bYDNbPJX3ocKngIdTXmMHrm/YR+sbhtDVZj68M8ZwANZBwVXU4a5oUuirCpWRJgI43PV7Zau8jDBKylN4s7r/s+/2rjAjCRpVWl8j8p4pCg2/JhKE9z+PcDT6E9g=,iv:CzD4tNRkkyzU+7mS2ipuHnAQBJhua2Iz1cziQNqiR1A=,tag:E61zTZBJFSQewofD46Colw==,type:str]",
"mailserver_accounts": "ENC[AES256_GCM,data:fSmtQNa2rfIBOWQpTxiYDf1LbxXCmmcgTjyYcYZ/Z677sx5q3p8QNYqq3KNSnB3yjnkHZmRfH7y6BxK+Ux+aVPOKZVVOY99W8nBaS1re6+1c9zWudV6adPkHAXs3w0qgjCufM5TQWDEPekZYQWzEEXivzAWTyhHhhRNWKcuvPBNdwEVHKNdEV3SbqcBHdrQQMt/ZsHvt9YRZTQ7JSip2sHyHadsoDwRsH/HhHnym2Kh9LyAOvMuIuZ4nVm+zOWu1HtaCvXUhQhuIZko/A14CcDi5NQ2yGZ2T57ddKewhJupOc4PEzoq0BC+LM8JHGuWOgnsIoWjW+I63rnqSMpWsT0WlQkX5N2svQNBWLT/j7Yo9dikEkpBTHCsZqyUiVP7Pp8tH2DBRnOaJg0gQaDPGpuAp0jNhbkxdhfZs9cINFztOKyr5fyQJba071QYcMnFHwt7gW6PoZHDquhsTNKL6hPa3noulNPk0m60HMXH/+e7p/ZPLeCSGjG0qPyzZuDvReOEq1LZjnmtn724quvzdjDGBfZROtO1FLpmZX/fpU1UTaEUqsnxByNIOkv+3D3DDmZkb6DrFSuLoSJehNSu7n7D4mHclyVFEzZ3kxOBNlUgQKzVeVF9FDK3g0QMRsIBfUEDuVe5Qva1YFcBzo+TcZstkjeZo9eD5upBFLSS6cCI1TBpG57Fn6aq0K4heljk0aG+tnZMJUQ8exGCHUuG4rzy3zsxpP+alT+fKF8gjoITP6cjq9NvtAficgqOKjNnZPLMkTxiBt4Vu77bF07825Gy1JpB5wkQbAaNAIA8hoh1AhqJDxOSEvIoJKR43wYUi+n96Sdb5BRMZm0hxP7FpmDWWZkD/ZjzBo+WrzaY7+qEGG6gL/3jOm/K4MwhkRoL4Cz+xBqMURoUdkKwH9lhG,iv:+Ndz5M9K3Y24fTmzJmB5uzUGKp92MQM5SoBUu4tmYPQ=,tag:OtnHnZa31Q1TKoRjgIQRLA==,type:str]",
"mailserver_aliases": "ENC[AES256_GCM,data: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,iv:IWMhBOOKg/WeO2ztjJT1nez/n2ukNLtAd4ymKcKY1A8=,tag:6XyQd28HU4H0lMEjkAZuow==,type:str]",
"mailserver_opendkim_key": "ENC[AES256_GCM,data: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,iv:2BSoRFcDccsrHZY1HY/7HrrTeFfYd2f94iMxSvr3Lj8=,tag:WS53oB9qIkExs+asURfZvg==,type:str]",
"mailserver_roundcubemail_db_password": "ENC[AES256_GCM,data:wQjzOuvUynz/Sk8oB6Q=,iv:p9pGuwpl2cYCzYk1TpX5MbxWZZPPDCfw33J0bcabdmI=,tag:oeH3hwEekTKT+eVFDezsEA==,type:str]",
"mailserver_sasl_passwd": "ENC[AES256_GCM,data:cst1FWEO9lhbl3Jkm/gKTLc+vf6v1hF4JeY/LgtkMQtAVD7XOV9CV+eTPRDjl4oLFiMoroNnfbEilUfXz8eVCPByxFB1d3cYb4lBKdGu1FfxLmgKNoQKgig4D9daTEADDCAG,iv:jpgiHqGWqZW45zbzRuE4+wV5/qtW+sloUxSOaQgmfu8=,tag:zRNueJjUwTLjXzqqkmIWLA==,type:str]",
"monitoring_idrac_password": "ENC[AES256_GCM,data:Q76DwBNq,iv:R3f2hB+k7B9xomi3mCV8DQNQWddC4NyGBRtqgirLTfs=,tag:7nSXiJuhyiz4MYEbBmaBuA==,type:str]",
"pve_password": "ENC[AES256_GCM,data:YT959iVRbkfyu7Q7oj7EN3UWBrctb+K6g4kedw==,iv:HgZqoytkwCFOVIRLBbcqPCdt8lXcVSmzS1rNbrid9ko=,tag:3eNcHOt5ZiEbseLlC6bjSw==,type:str]",
"technitium_db_password": "ENC[AES256_GCM,data:Lw+sr/qXnUd2kYVb6n8=,iv:COaQiuKcQqDoAq6SG7DTDiUqQOWKxXY1GeOI5dWIgZ8=,tag:maEOeCXx8IQbnF728653sA==,type:str]",
"technitium_password": "ENC[AES256_GCM,data:IbgBKYN/hkFdOKKYS1Doi9sLNWKvYqw=,iv:s6bOUaZxd1XBIr9Ylzs6CGwLAoRnSZBQVdEmwIBfydY=,tag:+UKHWA9pXnbRLTwqxEMIuw==,type:str]",
"technitium_username": "ENC[AES256_GCM,data:pWuCL1c=,iv:yFk/rOlulHBiYGOBisdkzx6Ub38NeO2IKsw2hIAwS6A=,tag:1p9vCBImfD3/MBMDNaH/cA==,type:str]",
"tiny_tuya_service_secret": "ENC[AES256_GCM,data:lWPGz+JvCwIWsXHvY0W4TkRRhbAuKg==,iv:iKi+UzOVhgrYWBp35pnWWgmtQyNrVSr077x60wQJl04=,tag:CXAR7Or/2cOVZMbKmKye3w==,type:str]",
"truenas_api_key": "ENC[AES256_GCM,data:WIbv6F2QWHOYN4fLR1nvK1eDZQ2YoHQXkI18hb640j+0EsFwi1NWv29FmVeHVoaLonxdcJsz+QiyLnqzhrkYwy//,iv:Rcs6icBcNDRud4BuHkLHd2AlYIcO70Dh44xl8JUuWXA=,tag:fXf3WWkY3MDrUdrMbSRvsA==,type:str]",
"truenas_ssh_private_key": "ENC[AES256_GCM,data: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,iv:RwuZjkxpLXszeObtm8GseJxanGIUCCQG+25rBwTQz4g=,tag:jR2y8QkMTSl2eL52vUsKlA==,type:str]",
"vaultwarden_smtp_password": "ENC[AES256_GCM,data:g4RdVgnsyz+KcXd7MeA2pSkOFl8=,iv:DWnkKkrEPW1awflGpePTlzmBo8oohHQcE8ZW81AO5W8=,tag:wQP7hCqkqX74xOLRnnAfJA==,type:str]",
"webhook_handler_git_token": "ENC[AES256_GCM,data:3xuJUXyD69uakwInPzv0GSciUcmWuLE9oGFyIjkJixiL1vo+fZyWRQ==,iv:x7btU2CHcZiIGvZ4ysJ2k0DstxGJfkW/N5yYN4mQLOc=,tag:pwSiPLJvCLcfKWq5NBWQtg==,type:str]",
"webhook_handler_git_user": "ENC[AES256_GCM,data:A2PNXLWINPl1+6ZV,iv:jDrvbncJ4uP0nHcfiIczVfHlS64cncj5YSycU2zA7Bc=,tag:DvKS2FuuoIoyjzWBa4EB4A==,type:str]",
"wireguard_firewall_sh": "ENC[AES256_GCM,data:lIVTJ+OXkG24/eIIY6xCN0k/CRfAVr8ILKrQfDw3trfDBDh7DKot23i8HOuntO/RO4hSwbbfDnKU7SpXy+x4oRejnu4UUFRDDbyiXNcaT7cBC4Mo5Bm9oFwf5RNnDa16fNTot/Ly3B23j+4nWVu9c74vgz5zIOxMxEchFeKMVZLHRJ2thIQNZFfUI3qXfMe9TbrApaJIPamqoUSZLsrPoc4+gHiFDK/UDe++Nw5331qanWumwvZX7+4UlDj3r8nplVqGLeVfAE6ABXjqWMLsyAkMa6IGxcH1/aNN586wT3XKFbIEMyGzOGfqpGQa+ppI4gnADT3rdVtmSKqYSPQgmELZhNySP44QrrzLugct8Q2OK/1o/lzgiO9K+Dbnu2QRgyVU0ZNyKBCYoAkdpWtvayvFD9HdPcZQjgXRuGKjYbp/b+C6n+PpgYX4Ya6/Ek+VuEM4Sbg6rdkA7Xq6zmh3E7MmXdfo+Gmg8w4K5OYfRbLAa8jjVCJHoR2hsg279JorjeG8FsQxP/obT1G5E+AWOjMyr9pbmrdDcqDhLA==,iv:EORr0I+lLo2Tx+kePPfhaKS/xniXAEb/gF4B/GmhV6Q=,tag:oo3S42JP5UlKXAnwLOmADw==,type:str]",
"wireguard_wg_0_conf": "ENC[AES256_GCM,data:nnByqh4r+yPlbe2aW7xWrf8TEBvy9/4bYg9FoVMUHtW2lrDN5v6a6cVsyEMmv1hUIzVQJFwhMz0ihh64dsa9mPxwO+skj6ZhPg62pxnVhdG2EgsUI9XgBr8lRuelrrSIecvl5ztfEe6pf/Pcc+qgAvAAmTGvdxM0taN5kvKeKpd4C9CncauzqEBUt1X/2fCBVw7xskV4gZLhrKYq4xuq8k9A/e29MljxICj7Gs01IOeLvYnN4DlXs/I2A3FbTR/9H/5hsv9ZUtJEtndosUbjPtbq0IpRn8vQVEKFJ9JRe60aDaSWLyCCFsEWhqc/ntjo+pA2Dz6HEt7Cv3FeQDQEhuvoRA9cOFt57wU6oN3J/ehMPr+5VF44TF6dW12ClmysCBhA7eidv2zAQS8LHPhw3F2HWKphGgIxs6ZGf3smP5lCNbsNGYpKwdwaKg61DalCgY/2Ji8NGpdkJO+6TtEjsXvbqscX6SZcxhn0+chdfaVc6Zeif2vCjWAcHJZFLRX1u21MGZYXSzKtCMLvrHv5qqJ493ElAN/9FtagUOzHR2M7911wJk6FL9QgWh3NM/CJOv+qMHMD+lFmsQBumSeCVoee3s2etX5LJbg9wpUNoZPrKOBHXUV95x9i6JwfftaBsPHu/AANFdLN/2zWccTwd+oOGVIuuMMYVukyU2vAWZLNI6bbY3w5BxptUWZ231rLqAFFf+BCdrkq/RTLQ1pDaHPK5k0eCA9ppZqdEnSV8LX9zYAs7MMCbExSZ3ZFiI+Zs85F8+0/tsrtKD0o3itNbszIUvgoJVfH3pRHMbL4KllDqZMtJv58LPFJ12gN/6gKbPzw4Bs0/caSefKXXC15FlqjCjpWyfgSh1dqLFpBEecReiYoWheTpTZycgA3N4RiPzv/p2RuvsA/s+mR3HfuTyvrQQoNBXXxOLt8YiBh9Q/aGkh5HT3XeUifYOwTpIcwZ8jIHZ43wOmEG8D5eBldlDLawvwCDlXylbBo+Hb5My5Lk9ZzIg9+IZVRPdU//ffpnRA+/dgMpeSPfDqfuupDptVRiQ3eAPjLkJ9ynjkvFsoK5nnps1aSYPPZecKoPcll4qz8iE5w7IND+oQPJmXeeMWD4hmA56Ah8lv6XTSRnFL6wa9q5ErI/xsX2cGvzzqCE02oMTILGa9eIJMwW0efdpa2jwVDDaWw/CGLtLKNhZiQ6yGBMSHEg3Jt9wZKLimx5EuvwIPncEKdyX5qvF7b4goazwY5hUAAD31W27ukkj5DkXnbVG1HERT/OaGrkMBC7TU4x0izRTZbPjAN+dT2ZbO86N1aWu29y8s5zPt9ntvzOj6+nZ0RTwMddyP0dOlXV8/TbkPhaE+EcLR8ecrLbFpfxdb2UqdEz9ML213O/Tb+ecDcywmiz428H9nZXTc/chcvK5PInkhHQ8Y+wIDe27vGew2Bl9cN7hnsnkXtO6JT8ioHUdPvzAkdLZ7ckQePXD5kLKxWOWQZkuMPSYq9dMpwmjJYPxBaA2a2uvQ7Wrtl7mBJmg+EUzYimJ7+DInt19AJCar1J0YsCqTotdqQeFpJqbVfBMfxVT+4jGtocuHFymK/YZp+T5kM8AHGXNF07vUS0ZMQHkzDpxfLoJsfpzgSEpnp0f71pkSsZzzKVvs0oCX+RkdfePdyxVKxK4oMPp64tmSheQEcg/zGphOp3soNaDNFrMq3tTrCAWRw3Fi0QyzmisjnQLI25LdY9eoZfLscl/vUL1ECMbj3NUjZQ9jtQH5ou712gMdSU1S5TcNE0YUzYUdTx9OPRdBybo/GXGJH1mtf91iBs7OV0HnbpKNNoZgA+1A2EMge2puVril+fEYWhwn4qIebGZHpLQUw8y72sQD0GnBnvBwtdplS1l+RABjZWdznxoz8nt7Qc8U8TgRlsBrpo4imCQxIBEMzoF42Y1FJkw5+604TwRW7KdqIKxPII9MO28v5MjNZ+NltSOLHJwU5YhU/Xl/w832y1L7zVu152wlvzJQR9Ejkd2A9PRxigtEXFmsexVviZ2S4cVo2+GhFCyqBN35a6GStUsDfEdu/4skZUbGaM6CN+Ze0GrZKZXE4vfYPInjf27EN2iIcT3mH91wXJ81797iYAiWEvBZQKOzbrHc49DNCBmI9CnVijbqDje1YqtXD3SmbktG0dXbc1RKADhKWJ6QDNf88micxbhrcMG6gRnhglvMHy1FZukdvxDrp/ZJaHbUfNYKz1pL6CG1Gmg46AZrsyeGRjAi4caOfXXFFG5SGug4a7bubOOUgH3k5/occBSTyJ5k63H51ytlUrJ+JfXRibW+N2bBvmpxKDJVYISyD4IeZcavkFouVpxUD4rnMrPjR0F5xUEYyNPoGRfdHs/7Sv97ugAEXFivbU1430yYcOp8euOikmrcL/CWDjwMWrEr1jbpr7Cqh3XRzPTyrDaggbsCwC3aP5aSueCugmBHjXfZniaDfTizWXmmsKy7a1gIia++CxkzIz9nGdbskvp/FqCks8bfvxpL8ktOueGCJP38vE/nRXJ3hKxi39IkbdUX4zQhM1yyeyn4ROY0W+XP+EpPH6H+Ly0yHtTM4VXFE3gA3p2+m66pd+hiKIPm5b3x2uWGvl6YFL5PeJ+oUZaknbbAUIhF4SOElUjZ6ScEuyCFiCq1rNcoVQhA3mojH1tyhDS5WXj/yKPUreV6xH9sHm00IoLLnrybNQQn557X8U6vBq4+NCjDZ/QnH8rH7rDz9FmuJ23JRT3Wfn5zi2W985FxmRoolCieupOCtCaqJJBIOjmAmf6wqAexN2r1bEqE3BMybjwANjXY856dVCKwjOey/tMBoI/AVAsRosmT8ml+Dr9OUrEw9DB1P8dz30+4/Q7hd8zB7OFz1/1OJU8T7c2yN5ZBO4Btx2autSap2Fqbn2UlJEU7KBdo6xw2ZerALrNa0cdMsL5WP2OzIjKeM3T2kh9Ex5XTAbMWnw1eEWylWhWxNaNx33CUwBABB9DF+qMs3sXPr3TbBPyw3wGjPobKB+FFc6HVvceCsoLLgquAoJ7VZdfG8qd7j5jgMZm/+S7C2d58P8z3PspCRXYEZlP2V6Yt911qLsyZi2Ypn4LHlBNwvKOXRMdr+ln/q9fVoPzYbMLXhJLzdX7MyglqF+1aqkoedSt6VZJnY2/73GPqJI3ednhBHvec0tHmueyOvUtoiS7AoGKlZUB7d+xSbYoLB7JTeG5K+crftQo2LT3VWqtJWAeOmFqkoLqjPRGa1qy2bEiuyoeJW55hglrIXo8lfq10waoXUgIQy4bdCvA9zi1Nt2oBiOjpi+x2GOI8qBXULEaPt56zwXJqvxQiZVHzYppscBY4bvR8rWjAbyz3+nfqPd6/tJqeoqcWRGv87o4zUYDldqJstDHwwN0uvMYK91Ovqa0PqjXD9e6VDF05Xx9bWULJUVFkmAYFZEyUFJPQEO10JXc6slr/MPpkGFS1xY69cosDaMw==,iv:ISREu26ZFbkq+sYBEKsuLBarETwLu6vB7bx8bLeLczQ=,tag:dJEYnwMM96Z5Ai2mwnc48g==,type:str]",
"wireguard_wg_0_key": "ENC[AES256_GCM,data:9WLJSVlZWJSluyiEl+Nb8Zy7zf0YpGnQ1x3ImF1AVhCsiTLJQHH55evLfVI=,iv:ZJAX8aCHGnzRpJxcbYFs5jP1tpf/7llx7gGTFOWJ8mU=,tag:vZYQvNIqFTeE57uaEMJC2A==,type:str]",
"xray_reality_clients": "ENC[AES256_GCM,data:yrcDMT1FTF1gLfmUGLDf8bnUsed/xN7ZGcexM12tHCowDHGm6En8xKahH/CB1qk=,iv:sHLNM2Z7Y2RI2CJPDRvbgbkFQyu9/RIRzDEc+RjPlJw=,tag:aMkDRkprnSkYtxFUFmx9mw==,type:str]",
"xray_reality_private_key": "ENC[AES256_GCM,data:V3HgqQXSqqiYcas7bHqvNhYzUVXA/DBbyS1Te49Hc1/U38OJZlsWxyOy1Q==,iv:4QQg8o36mdA/0hcP6/qk4GZBXZnCxvpagd7KicPTXkE=,tag:wytgLhmQeAFDukhBbuvaxQ==,type:str]",
"xray_reality_short_ids": "ENC[AES256_GCM,data:fzGiubcm9pUrggvwJj2lnIhBzx9B9k+hOiijuUjGE/41T/gLUbLQdQNjz+8gmAIv9YA4cyHrKdLVaPBSAYbVhN0=,iv:Fun3Do1DwXNMyl7EBUu/fQZ3NxPi5PwNQRhNlWDZoEk=,tag:CyoBeABkgh9AtSUUSUO0Nw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"data_json": "ENC[AES256_GCM,data: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
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"deletion_time": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"destroyed": "ENC[AES256_GCM,data:AvLFgFE=,iv:5Q3dwhwsc1+mz+hPadvog4zmvrsQpU0W2eJB+F/ROG4=,tag:WijfBNxzrnhT5P5pfTOCWg==,type:bool]",
"id": "ENC[AES256_GCM,data:6gaz0ui2oI6zKHkf7p5sKmBytNA=,iv:vB6ZJ5U2sM7tZBF2NQ1FbZBPPMeLccE26e7yqN1d8lw=,tag:ZoS/sUgEMpGsFFTy5FfUIA==,type:str]",
"mount": "ENC[AES256_GCM,data:X+6bpQNj,iv:A27wpYMHcXAY9kATjTOcczBhnN6QLlO8quMrp5pocsA=,tag:mXek04FD9JUJm5Yr3ra+0A==,type:str]",
"name": "ENC[AES256_GCM,data:dyEUnCIQfmM=,iv:3GRZGESz3tGkF9v7W9svwFQ1QMSSjinLRLhPE7JNSjc=,tag:GlwQ7IxOHWOrxTMUroKbrg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"namespace": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:pPooCN6rqKDKQHFKBEO1wrQekTE=,iv:niURECl3amtl+5aWrCa+1r7eNCrjg4L3mmrPVzUAumY=,tag:P+dQuNpIFZunXA5UUfM27g==,type:str]",
"version": "ENC[AES256_GCM,data:Ng==,iv:OYTu6Hg1MvWjwcfIXHE4Turt8QZwOjjg+xMFKfgPSqk=,tag:9sjLxagGcOQLT1FpxNnOrQ==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": []
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:tPy54ANLvynA2w84sYJQsg==,iv:pSeQjKTAAj2sBmeSCEcKgGASqGy/cvxq5+0oZrlXZwc=,tag:tKYC0i04N8oQBVBxUmuIcw==,type:str]",
"mode": "ENC[AES256_GCM,data:6tHzimCN7w==,iv:isbMLw6Nz6s0Nsc5GnVvKbmB51xfHoDOi1+4o4QybZs=,tag:8JhSgq6Vw0YzBsKm+XKSxQ==,type:str]",
"type": "ENC[AES256_GCM,data:srlF5KvKxYY9L/l4,iv:xF6k2CQCkIBh8iOK3uFwHbjTPp8ATsmW1ELEIGRdhpo=,tag:BOLNzz3zyJITFU3434sDDg==,type:str]",
"name": "ENC[AES256_GCM,data:pxhaiQ0cMNl8,iv:dxymTD4NwysyCVEOcKR9Vfb+KL+n6peX72oB9wPh3qc=,tag:KIX1mEFqc94kpUIgQpP/xQ==,type:str]",
"provider": "ENC[AES256_GCM,data:iclFkqiAuVZ7fy3GiNi+PLb55rBMdAmSljbGc+jsHns924grRezaFFtgBaeMpKip,iv:2lwaKV7dS2+CNpVHQwS13l3cfHOuMlu3oq5hk6iLLS0=,tag:sjodIlmOk6yGFu7IccCTQQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:mA==,iv:Nf+y3DYyDZCTJ3duF7KdpNzSEzRi25iPOwz/7SFGEh0=,tag:ZnnMUvfkyqU/dXjLxY9wTQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"atomic": "ENC[AES256_GCM,data:YfSxyQ==,iv:c6pyCnLFcntaErwEjfG6U1svCpUOnGTg2Frw6No1TIQ=,tag:afvpH3PMW6hcsqJt0ln3lw==,type:bool]",
"chart": "ENC[AES256_GCM,data:5nN4/ScfzL99,iv:r1yWfWW0WOC/cA+b+Tjme6tA1J6pA2uzRiTp4vWL9AU=,tag:REL/j2oWKYyWS4ytiSSQVA==,type:str]",
"cleanup_on_fail": "ENC[AES256_GCM,data:E2jeIWQ=,iv:Ms4fSmtJSnbgfdu0aq7yUkqGnY/C4hQVI0dEed30aDE=,tag:myeI3iU36/uHTFvvt3GHAQ==,type:bool]",
"create_namespace": "ENC[AES256_GCM,data:TGVmBQ==,iv:MI5wfUgYLcprfRKNpITsSnlfzTEi6+up+jK+XZsCYHI=,tag:PiRhoqceaB46mvOiT7YbYQ==,type:bool]",
"dependency_update": "ENC[AES256_GCM,data:H2eMt0Q=,iv:UKSjfWaRxfE2bAFdugGhY1tpP7xOS3FLPm1G7np2pbg=,tag:1YvQH/0t80msaMQ8Bd3IWw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"description": null,
"devel": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"disable_crd_hooks": "ENC[AES256_GCM,data:Kfgv9sk=,iv:jVU/Cum4VUQPbal/EzUqqfL3dNrt/MDWJSNUQlmLBdQ=,tag:/NE5p8yT0W0KnOtY7AS/Mw==,type:bool]",
"disable_openapi_validation": "ENC[AES256_GCM,data:YskSHOU=,iv:Q7+oxH47ZJbW5KV8ryGb4agSK2oGTnfdQOONMWP/NOU=,tag:ZPeRVFDaF7Ow8+qzJtmVRA==,type:bool]",
"disable_webhooks": "ENC[AES256_GCM,data:A+NoqU4=,iv:q1KbW1yqFVsZLWCqIIdpvFtD77/H3BRUmmz9D8X7qTI=,tag:RX0yPOmx6GbAdGhDuomvQg==,type:bool]",
"force_update": "ENC[AES256_GCM,data:UKGebqU=,iv:Gp1QmSTomWpfWVJbV3CzpPP5bg7ECsRDa3YCAWYdchc=,tag:Pg5dzZuVeEXHQaDa+t8/4Q==,type:bool]",
"id": "ENC[AES256_GCM,data:PEetByyApr0fTUo=,iv:VfwVgy/c0fmxkGZ5+1Yj0HjBcjItPwUWMfV/Vm4sYrE=,tag:DaKo3t0cnL48Vun2SWOpBA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"keyring": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lint": "ENC[AES256_GCM,data:cngxbLE=,iv:bB4xLzavPmfby/+GOsEaAldDDqcMItO3f5gsS6zRUX0=,tag:PbKqP2EKR/M74CabWqk4RA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"manifest": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"max_history": "ENC[AES256_GCM,data:Ug==,iv:RavA8VfKz4Z4ONgjDoxRc4AweWzhxL1BGh+Y+ByT/SM=,tag:G7ZQjVicY77cCOCnNYgjDA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app_version": "ENC[AES256_GCM,data:EL/ltT9Lu3t6,iv:usmiGnXDH97alOCiWFYAf8cXwkjT5NmqhJDn4f3x1+M=,tag:W/9kUCJ5t/4tSdffUJOppA==,type:str]",
"chart": "ENC[AES256_GCM,data:2gzgRAwFLz8r,iv:wmUdQLg5pLtgeKD82/OIh52e1GvEPtrvaf6rxPWh1KY=,tag:isN46FgY+cQybDRs/8GYUg==,type:str]",
"first_deployed": "ENC[AES256_GCM,data:E+3anrDhuDV41w==,iv:owY3gwjZ28S4Hj//fhOU6K76TtXWB5ikLSefBb9H5wY=,tag:gsxngfhl9nC6+xspJ65fug==,type:float]",
"last_deployed": "ENC[AES256_GCM,data:HGH4thD7YViQCA==,iv:pwgeSAiMg7QHq7+f50aRit8rXl2B+hs4vEGBmu4ZS0A=,tag:YFQJSebzL+bFf5OM20u6cQ==,type:float]",
"name": "ENC[AES256_GCM,data:3u7gh+wIxnIqXg8=,iv:GuAGq18haeGEp6fnSEYogeEYcRCbJrdvMPBQZjI9PbU=,tag:z6c7qOr3KwS6MAAxaHUPCA==,type:str]",
"namespace": "ENC[AES256_GCM,data:+sDa1ACkLXXt,iv:+dcAJEKZPpuKyZrUbuf8CrpzQjykix370+YrZrlzL1Q=,tag:3anuVhDxi294p/z2/a/wiA==,type:str]",
"notes": "ENC[AES256_GCM,data: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,iv:YgEu6doR8533rO2Y3589yP7LuCax9FybU0pJVRqRyrg=,tag:jUzCUWoVJp20u4u9DGx6xA==,type:str]",
"revision": "ENC[AES256_GCM,data:YUo=,iv:0mCLuP0pINKDvNlKI57n3ImxS79JgID9Ju6JSdaAVJk=,tag:ypyfN6zU8T29nAAIV7Q76w==,type:float]",
"values": "ENC[AES256_GCM,data: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,iv:q23lnzfrZau4lWYnQIWKL3ZCFqBNiBEX1ZmgZuJ4y/4=,tag:JMsYKvwn4pZFhXRDcxXBEg==,type:str]",
"version": "ENC[AES256_GCM,data:1IVOeuFR/4la,iv:E5/L5FlS5eSdZY2fs22w5pR28ck0zjR9AmLedkeoC90=,tag:IFJd/f7KgKiSO3x3nu8ZNQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:sXlj07Z5c2Kpl9U=,iv:UtVmBngISCzf04XHy9I96VPLXNCoSs9cg9YH0lsKEYI=,tag:dJu3iV96r4PMXkQRVjXkFA==,type:str]",
"namespace": "ENC[AES256_GCM,data:qnplR6yxZGbg,iv:TgArQ4VPSvKvuHs2VE45Ab8Glr0P3tOfTZMQEMGEEIw=,tag:RXtNhVMa+EEQ54rYUAZPAQ==,type:str]",
"pass_credentials": "ENC[AES256_GCM,data:yfVpPbI=,iv:+v+IEyHHqTrujZP703HXP9/dHd+uALffRaVKNZyUZ3E=,tag:64x30VusbANqRYaO7QbknA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"postrender": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"recreate_pods": "ENC[AES256_GCM,data:aT8iiL0=,iv:1qsW/qzj/bMYHTWk/X9goODelV3xd8b66/y/HScmBTk=,tag:oKwqyTf+BoWz1wZjkOWEyQ==,type:bool]",
"render_subchart_notes": "ENC[AES256_GCM,data:jvnUCA==,iv:m5unYvXBX1lLFsGGFA0QsfiY/IzbWt0JMpiPzUvCvZ8=,tag:BPiOeMxC421Oex2mxJOVhw==,type:bool]",
"replace": "ENC[AES256_GCM,data:w1X+e/4=,iv:nIEdMBnI8WeyLGXmp2TLi1rmD671xgMox42jZhgIdUg=,tag:Nrm+WgvffjfSehcefV70Gw==,type:bool]",
"repository": "ENC[AES256_GCM,data:MwR25r7Gqd5Kaow+LgWwi2Y7IEBTSYitg4mLu3Q0,iv:xX+CiDptB9TaD9+bqa5fEflneSMWme80uAPZ63ui7Xg=,tag:U3SX3lI11Qzm2RJs5NP23Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"repository_ca_file": null,
"repository_cert_file": null,
"repository_key_file": null,
"repository_password": null,
"repository_username": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reset_values": "ENC[AES256_GCM,data:jf471Ik=,iv:GUWOTgsfq2R/JiwSNvNg0/kh229VZrsNr70f7pIcGKU=,tag:REtvpSGrHmi6CJBUD6ZJ5g==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"resources": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"reuse_values": "ENC[AES256_GCM,data:iCJ8yns=,iv:EoDZelmtxfCLj8e77JDWfoKj/MVajFuDO5ZjiUjCpzM=,tag:JaDs7s+NIhM5QI8cLulEjg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"set": null,
"set_list": null,
"set_sensitive": null,
"set_wo": null,
"set_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"skip_crds": "ENC[AES256_GCM,data:lH//QBo=,iv:ngaH9ZJCdQRN7Wrc2F1C0Q22dOBZtbtV6YbwKNd288M=,tag:sJQfWLtVPSJ714XE8OwGMg==,type:bool]",
"status": "ENC[AES256_GCM,data:PZyFqP9kBCc=,iv:Kd+K7eeJM6wFtWX3hCmDUjZ+gKVvrZbjjT4+6pkgPsA=,tag:6PS0dR4F1l3eVS2lot2BrA==,type:str]",
"take_ownership": "ENC[AES256_GCM,data:jJqwKeo=,iv:Oy1UgT4MfyZA3Eeunm6EgMhMGxKvSFI9ul/D0b06LCc=,tag:IqaURMqbvpxg7goRxVKsBA==,type:bool]",
"timeout": "ENC[AES256_GCM,data:7tWB1Q==,iv:Rxvict4rCIrKvZmJ5DNPyoNE+r6D+tosH0FmOzA8NvU=,tag:D0+c8dvOoon8zALeKjYvHQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"upgrade_install": "ENC[AES256_GCM,data:ssxvAZc=,iv:3QcYjA9VLPurHoTqgE9ZTdxzmcQswt8onCJa64MHkqg=,tag:NnctYOJ3XOXwtO6MRaW2dg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"values": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data: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,iv:hDKILxoD/YAcluAX+rHLwVt++Dr5SXlOKWja67e2Ve0=,tag:MumTDbcdDnFH3zbYkdurCg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"verify": "ENC[AES256_GCM,data:oAtnGeE=,iv:qwsZyROMHnVz/v2vNWmKJpJGniWa99WpWUQ7cKAdofM=,tag:5LStp1Ay+piM5Dx7ongyeg==,type:bool]",
"version": "ENC[AES256_GCM,data:9Vo9wXGJk4qI,iv:MF0tAgGYyLtAOQRnhvdaireeeq/7ZTmoii4wOhZwKHs=,tag:wW78oYWTUukVHCw5BAPEDw==,type:str]",
"wait": "ENC[AES256_GCM,data:uKnLsg==,iv:qQk527NqNqpAi5flGiyNv+coEQF7oZkc2XIG6fSUjE8=,tag:vNmuil3XLIFZaHIG8lHn5g==,type:bool]",
"wait_for_jobs": "ENC[AES256_GCM,data:MTkIIuo=,iv:BDhefYwxKTP2+wLJXbOp8Bu2glHI/0In07cmoUmPqM0=,tag:OEYwsJLSmKkw8IkrvBVWWQ==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:qJAO+Xa5scM=,iv:487uXdRlTNUHBhie10f96LTH+CLVgiU1SILouEPFTk4=,tag:fJ7BY0IFoCsQpTehkLhZ8g==,type:str]",
"value": "ENC[AES256_GCM,data:VVH0zLb/,iv:pym1SA9bdgEMIiszOEcJHm3gSByKdB//S1t029AWRt4=,tag:MYTM2xUE9BogiE/LxFHmzw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:vQMDOxw=,iv:LQTF9x/fwRkV8iWmBge+nE0fMXXn0B5nCI4o6tUD8+4=,tag:ZZnYGrT1renkQbnR7f5LCQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:Ag==,iv:UWzdKpEN2Yrx4yt9dRNP/l2+OFzcolgffZPi64HBhdU=,tag:MHa8/N+vrYM26M41WB+feQ==,type:float]",
"type": "ENC[AES256_GCM,data:vQLt365i,iv:emcoNyj86O0jltJG0ku5xOT6B8Fs6ENPHI4mkXEjXFY=,tag:g+c5AsRmPwYz8yGCoyrrlA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
]
],
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:KwHQzz81XypZLTpAb/gXO59swnRiPRwB01Oy2a165A==,iv:iHmqLcAanaGYQPTmElInMatz7pROIKWvVvMSwdvjYsw=,tag:G6ISO0bgChzWEEF9LbBYHQ==,type:str]",
"ENC[AES256_GCM,data:l+d1tyiybk5jC5dh8oHyJgxseEL/Yvmq7m9khxtArnAZEKYxFKZ/vkWxP2GNicY=,iv:OB37lf1kjLVn+xxc1Y0iPA2wtb+mYPD8FwOyKySaSjM=,tag:Dzg5dsp+uOmVLF5J/BKqIA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:ksDsibpMwdVzUI19dhIZfQ==,iv:3jzvzkgtlQBQ0y4aPjvDLiNFaLbTEdWjD/llaKHW/BU=,tag:hTcVk7/SM6f9khLXDt7rTA==,type:str]",
"mode": "ENC[AES256_GCM,data:5JEHa7APNA==,iv:J7c0BD0EaAkXzwKRvYmiwZ9vs+dEckvFupMwxJsyeXI=,tag:8gaIGJ2lnUhoxEXVixwhqA==,type:str]",
"type": "ENC[AES256_GCM,data:PqufrmWzk81k3rEGehXESaGXnxmr,iv:0g/AKnpOlc5kuIVdKC/Zlk42JUtaJvDZYuLd9c7VuLo=,tag:SrZO0p2A+yfP3zMVLX5uGA==,type:str]",
"name": "ENC[AES256_GCM,data:NsC8BApL0pJAX/tzeP7WVQ==,iv:dIOqFrJVESP2lE5MUaFjm0zbQyWORtajtDiUlOjfea0=,tag:uUk96wcA+6qfTUbuLBIZ2A==,type:str]",
"provider": "ENC[AES256_GCM,data:GeTEFVF+i47ZC3Py8XRFc17Y3PgXu+bex6yniDePIY13KJgWgZW3I4R4J1uJKgk3vLadk2Qk,iv:yVoJhec+ZsIiV5krqhI54Qlfnr6q88NhqSBIkjjP4to=,tag:rJA9EiouGxPOBFQY1iILwQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:oQ==,iv:N3vmfb9O0i7owflveOE8EFo+8H6Is9u71nfX+YbASNM=,tag:HZYF/fiIrk3f56ItVXpx/w==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": {},
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"pgbouncer.ini": "ENC[AES256_GCM,data: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,iv:aE/VujVRJ3TmGt7/werWakPcRvsky+QuR0uRtdNQ8j0=,tag:h68q2nfaYNfRzqmGUstCEQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:cNu4gkb1fVs3G/cFGstLrMvNZzrfZPDt+20=,iv:EQ0NM/SfD3twbGK2wWAvtaoBnD0mGRplMy7VzUj9+5w=,tag:ynINHGpfxTAeuQpnh1QTLA==,type:str]",
"immutable": "ENC[AES256_GCM,data:7lsZYZE=,iv:pJH/25wpzhjG2as8ralZ2NcsmzrX5eAhevlvFsWx2F4=,tag:7hJOnNpJ4CKPFuCDmAMmqw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Tg==,iv:lxHIPxw648cDx8mW6CAbkUUa43s95GOgYodNtzNb6DE=,tag:WLQ4OV35MsSiwYd4asi6bg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:vTu9Uu/UCu0rVxTeKrMSTw==,iv:c7pmclcgmvYK4vbSpPaF+rwor9gVmMENhjeERdFDzWM=,tag:JUSxtzUMtXRTL24WIKbqkw==,type:str]",
"namespace": "ENC[AES256_GCM,data:gDl8qzxezRRQ,iv:L3snWusOTeSG44k6vjytEyN3B5iE5RZ4cAQEKRR247c=,tag:gUudx7lnYf4AZwK+o3MC7g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:T7JKt8ry6Hoa,iv:NUrGP2xFPhYjtd+HtomXbGCI4ua2Zkhbb0cfpoGeb5g=,tag:nFiynfavqZGnciQEBIs9nA==,type:str]",
"uid": "ENC[AES256_GCM,data:v5JkjTcLyBUDvRzsoR5n1Ea82fNrPWpV6cAg6bZTp1JWx9BY,iv:nNfOq4ZPCm9ipZJx7FZYWCIbYOKIcpKpBIVLhO8QAqc=,tag:SS9sk7CzP5RDSYUTDKicCQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:7oBWpgLW+aQ=,iv:xsiW+9tKrln1z3FPeaZiZlwsurWgM8dXZEdsvNhcIVA=,tag:FvlQbq4cs94ySJ3T9a9w6A==,type:str]",
"value": "ENC[AES256_GCM,data:e5mLDw==,iv:Wph/6W6TaSF5ulWDvIlS0o0c83T/6Yl6WeosgHvlnDY=,tag:PdoYJXgPT9Hlw6g+xJcIGA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:SDxWCFI=,iv:CXqzTifqq4pdAvSE7dHos8g0En2kP/TmisLBvcaovnc=,tag:PlJ7uhNcY1GUAQANDyzvGw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:QoZEb2iWmV7s7xfGqQ==,iv:PIrX9N2hLeHAONzHT7A5Ywp3Z0Npp4/uDlUHcg7y088=,tag:fTU7dKlMCrMA99v260VoPQ==,type:str]",
"type": "ENC[AES256_GCM,data:C60fs+Ue,iv:dfa5Jivb6R83NoDPufMFqg/1bpwM4h3MEqBI/BaWwUI=,tag:l4kCgJhKmuJjg5ifGe7CvA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:HB8rjWWMvnQ=,iv:cPqtT+/EqFx0Sop8uO+PamKbBSvOj0unFpzROW91uAs=,tag:/gTNgsa1gAJLniFlApn/dw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:xRpNXCGnS161e7TEbrp7FeZ8yQGnasiv19/8gPodNw==,iv:BKNngJMrBxIEHczgXVchuCfUEX0MeN2p8SWd0HJDjPs=,tag:KokTaTVmnvxfP/mWnFf5dA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:iwyjBcUEdz/y8fWB3NZfSA==,iv:pHIcF6qP/cz1qDzx0JkzY/UnBY6hgaodNP2WKZYS1Yw=,tag:UcQySgNRUCAIWhCAzDq3cQ==,type:str]",
"mode": "ENC[AES256_GCM,data:1e0opVER7Q==,iv:TJxU9GZRHf5KorfEwO/lsUSuMyTyOdVvFZ3L9mHW72Y=,tag:4GV5kMI5yxS4bn1WowF/hw==,type:str]",
"type": "ENC[AES256_GCM,data:0D5vTFvr+zODjFbDXi3rVg/pKH/V,iv:xSUAX4YLUq8FX0NffQulPoqAM1cLZcJJTOUQIHGtChA=,tag:vLaAVlibk9OfonN6lsc7qw==,type:str]",
"name": "ENC[AES256_GCM,data:0vtbRFOHl+8M,iv:I8zsIpvyNnD5bg0EyXgIPvgLWCIWuL8/MbwT6TJS/Y8=,tag:LMYIE76/Z9mSey4WEuxeHA==,type:str]",
"provider": "ENC[AES256_GCM,data:O9mG2el5gtPyAUf+tSyHnd+XD00qNMAyqwympeWnlbY9ZLECCgakbhnNa/iYBBvQtITFOwMV,iv:1gm4/3d1HgdJhZpWVVRyu+LKMkLAAQA31sfnPYwEsVo=,tag:2EgW7LfLfR9VQe9LHhEb4A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Ww==,iv:mRYZhg5rcNaZoFjY+Wq2SXgC6KhLSi5mGEDp4rKWnLc=,tag:WWn7HDCIJ6zwZ231XwuDjA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:MggS/sOWDZ03HPtd2Gp2+E4ieg==,iv:2cQ3OTTtISUVdeZhGeVyIGioPYY9lj9oHfyx4akowu8=,tag:t8Q32mPMq1IsO70Iw9Uyeg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:efg=,iv:pa2sSlnSuNtqd0626KKNMORRbTErIcOBueSghGLuEZQ=,tag:TJmTFP324Z6OVJENSkrbgw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:K/zT/vzHZELU,iv:AMitHlfe1Gcx593O9ddP8uTkqPe0soy87ShBOQeJHVw=,tag:YvwcPIdaCXA2q6IWVgM7lA==,type:str]",
"tier": "ENC[AES256_GCM,data:ydeWiy3uOStl,iv:F0N+QGWGtj7hd77tPimilh9Oy2LZjFEej6U/7JbJ9zE=,tag:LjEdX46BSLEUHC9W769FBA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:d2K0yK6MaxXl,iv:uzCp+aDwIKKQrdVhJgVb1MuF2Oi9DZFGrlvzwxGfyB4=,tag:r6759mvPM5O7EMY+JYTXOw==,type:str]",
"namespace": "ENC[AES256_GCM,data:NTxBWP6MEpEG,iv:+mJycM0pc/s1koIJD76na7PpCoYRMymF7ywpE6S7awU=,tag:6WJx/UolEMUtLtPXIC5C5Q==,type:str]",
"resource_version": "ENC[AES256_GCM,data:N389/V9F2Gou,iv:3UeQW2OMSAc6BgxfMoCMzDI1zqa+4tpWOsrRZoFj+/4=,tag:X6CptCFKcETOKDvYdBurHQ==,type:str]",
"uid": "ENC[AES256_GCM,data:aVfv3TJn4YKweeu4GGglWbrQnPn4zNYOjRblADSksvKZ9IAV,iv:DIZ+S+uZJjsbFBSLEmFBXq6rE16OW7Sr0LQKQ42Zlzo=,tag:yhyC2n4KLQswJaIZaqSNoA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"min_ready_seconds": "ENC[AES256_GCM,data:tw==,iv:Y67ti42EFFhMOCtNQbxIXQjznIo55OHdZT2iYwsGLHg=,tag:G/qs45uK/NUNEjy/kFBz8g==,type:float]",
"paused": "ENC[AES256_GCM,data:mUrT4wo=,iv:g4NXGI0NqOHeVjvjj0Uu+l1UThn0GLUsLQN25fW45X4=,tag:OiVHVCOCLxyE+SEZnI59Cw==,type:bool]",
"progress_deadline_seconds": "ENC[AES256_GCM,data:Pvkh,iv:EbcY7WNZSmkRz6ksZNiwGo5Ta52x7oVIfDIJAYPnUbI=,tag:nC4rpqujboQFSQYxKgu6gQ==,type:float]",
"replicas": "ENC[AES256_GCM,data:/A==,iv:y4jJDDCXkSVDbeYOYgorEfaXJyniezPhyR0ifzLQISs=,tag:BWHUmXxhwP/hEboJj+vHzQ==,type:str]",
"revision_history_limit": "ENC[AES256_GCM,data:5Lo=,iv:4pxaui+iRbkYhLH271efxKqB1m+efTPx5ndfHTglHmQ=,tag:zjbpPqK19aqX9OgWVcOlmg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": [
{
"match_expressions": [],
"match_labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:vlkiIbelpznJ,iv:RWpiO4T4wdIr7YRJi+Rz01rGgCcYMxxRwoc5aoJaaj8=,tag:ZtesXV/6AFP48O4zQ81cuA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
],
"strategy": [
{
"rolling_update": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"max_surge": "ENC[AES256_GCM,data:96O4,iv:TjAAHV1eZ5jvX8mf6UXFdYOB5OzJgtKYoj74br7kHwM=,tag:/VPGnOzZzRI22yygj5h8/A==,type:str]",
"max_unavailable": "ENC[AES256_GCM,data:pZgp,iv:WevnMLfATcQrvCmCypOwxGZSloUP0m8xZwxjni0yFZw=,tag:Ya6FwTYroNIJaDrOS6ERrQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:w2GFc3gozP5HAEml3Q==,iv:mjvMkGDnUI+fgcTKsg5G6pRUiPxzbIKj9hzNo0FDSRg=,tag:aQsePnX5zNsBeF9Bacb9ZA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"template": [
{
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Vg==,iv:ScfqSJa4T6/VpnU3onB8N6m/A/xaks/W5h8ygOXJckM=,tag:XklArBljVETX122BMfmmCQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:pu4P61QoCG1B,iv:LbCbf6DPLKq9U0j+dFyn1rjSphHNLrDsai6qp9HJ+TY=,tag:DlA+ade9u0VrFbeUO2qzmA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"name": "",
"namespace": "",
"resource_version": "",
"uid": ""
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"active_deadline_seconds": "ENC[AES256_GCM,data:9w==,iv:9dJ3NtRIDHpfCcCLoWenqwCysgJQp0muzBe4GINuG+k=,tag:L49BY9OFsgKmriGu0xUGsA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"affinity": [
{
"node_affinity": [],
"pod_affinity": [],
"pod_anti_affinity": [
{
"preferred_during_scheduling_ignored_during_execution": [],
"required_during_scheduling_ignored_during_execution": [
{
"label_selector": [
{
"match_expressions": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"key": "ENC[AES256_GCM,data:RLtKlgsNiQgt,iv:RAveIcJRuo3vSAdKQOWwomv/CVSUAfrYbURh6bjyoMc=,tag:XRO5UwmIxMeReIqD3HtvpA==,type:str]",
"operator": "ENC[AES256_GCM,data:3NA=,iv:Piu7Ovk3kp2TkdQa4I0XAyB7ESg6wkQjavBKocNKnFI=,tag:7yVC+gNgNzVNML5Bm3D4AA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"values": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:uD9M4M+/,iv:/BTgzBhpI3MpbzgeNmrowilOIEx5SOA7+K2wvJ0OkUA=,tag:06+NtFm8rdD2934Vlk7Ovg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
],
"match_labels": {}
}
],
"namespace_selector": [],
"namespaces": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"topology_key": "ENC[AES256_GCM,data:C+56bW1Nl3JfKGzlUTgl4LA9TLMH7w==,iv:KsOyMhRUIbcABWnnMy4RQBv2XYR75Gw2Y6cofDNQ0Pg=,tag:eq7oOQzH4D9AtzFXgAMw2g==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"automount_service_account_token": "ENC[AES256_GCM,data:c7XcMg==,iv:gcJU0oQQiZK9uEg0XJfAI3+r6SbOKT1Z/8eMKwk0H4s=,tag:FbHFGQ50G5Nh73+Dal7ejA==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"container": [
{
"args": [],
"command": [],
"env": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:+kK/ChdUyAdU7xbDeYzgX8CEgw==,iv:iEOi9A5aDvfxXfIQ3qROcEfy6R0HxQDJtSaemxX3Tw4=,tag:JDdPfnBPViGZZPADMVTaMw==,type:str]",
"value": "ENC[AES256_GCM,data:FZGdyh+BTk6HAZsWMZwMm/eh5EXvmMjzqS7Oymq1oWo5CKqzzkI96KDw/45LBNzAUO3EN2jIgygxiMaaD0J26seFvaY4PadfaPJE3CbBPsHI,iv:Kua+xR4uje7jZSDTmz8jlZ+ZaaJMpLkKZT1BlNiu1RQ=,tag:EM51zmo3ShJ9JcHXR3i2Pw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value_from": []
}
],
"env_from": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"image": "ENC[AES256_GCM,data:wUuoN+Za6yYoCzHCTD9JB0p7UBPRqdRH,iv:I8nh2X0+4aq/6abyumBJkkmar31RAC45UWnpc5ZMuMk=,tag:McpXe7UbuUUWV1q1y2LsLg==,type:str]",
"image_pull_policy": "ENC[AES256_GCM,data:W5ekek+GNxa7ppxp,iv:jcn/VWRhe7irmCGMYw3vSa9652yUrYD1D7sRWTWCJ00=,tag:+HPXLo1z8lRE1x+T9fy06g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"lifecycle": [],
"liveness_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:t9w1RBaPFoqI,iv:sWHUsxBzg448B22cpMJ2SSLi3AtUhq8XFULtsqIuTZ0=,tag:ASN5VCCSe0G1b/96492APQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"container_port": "ENC[AES256_GCM,data:1y10bQ==,iv:Mo4Vtr7Fu0QIJZswVrM/Nx8jWKQsteDqdSYIG7nMD2M=,tag:hNpzIUWQt/biKp94NpF8MA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_ip": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_port": "ENC[AES256_GCM,data:cA==,iv:dlZR/MTm370WgFa7f7i3ETw96iwX1AAMYmv2HxroaUY=,tag:Uix6pMe9lDN9LxEXLZXqRg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"protocol": "ENC[AES256_GCM,data:Zgud,iv:dPCkyKVEI01IYa2AZqoL6weCftN1DYYH1xX5HI2Xa20=,tag:9MSZeL+ycy8sxSBmglplxA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"readiness_probe": [],
"resources": [
{
"limits": {},
"requests": {}
}
],
"restart_policy": "",
"security_context": [],
"startup_probe": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"stdin": "ENC[AES256_GCM,data:TB9UgIE=,iv:Vcsy+JYzXsNjg8QH8XKLr+7wdOKWogJ4V/UQLHQAEfs=,tag:ih0nJe38/6Fkgi4+i0Q+xw==,type:bool]",
"stdin_once": "ENC[AES256_GCM,data:aKyPVPU=,iv:R+xz80ETtrD7h/Q2J0UaxzNJzKNS1lB1y0dP9lQ1ppY=,tag:MoNzRn0mY7PjsbN1qiflzQ==,type:bool]",
"termination_message_path": "ENC[AES256_GCM,data:iDUIoH4Oj1H3i2z2ihoXjbqu4no=,iv:8Ike87ZQRHO01kHWQXlgPZ4jdvbD+tyKLBPH05yIKUs=,tag:2hdSkJteikaBxj+TPOOzrQ==,type:str]",
"termination_message_policy": "ENC[AES256_GCM,data:yfIuSQ==,iv:j0bFGQIixle+ZSu2amJrG++8NL+yP1Nfv1FG/VRprAo=,tag:iq+E+/sHbAB4aUfFFVt75A==,type:str]",
"tty": "ENC[AES256_GCM,data:fKId06c=,iv:pTOTkdsYrisjCnZGr2KDb1wzBRdYXSyAl7UizV8qfeE=,tag:/49vQjXqWn1JE3q2UV0xRg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"volume_device": [],
"volume_mount": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:91xB3IkMBHeOBzS8NUnbgssBeHZG8XviMVuwsA==,iv:kXFZaXRRtnbW9n+agFmTank7Gm2sanvw5z7lkiohScg=,tag:GpyVa0TzQAUQoeP+h60f2A==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:chB2gg==,iv:mH/UAbpTnXtnOmL0nI1reIGLGCl90ALMRS1jBIbm1fY=,tag:c790AZN4AugStG9NGFW43g==,type:str]",
"name": "ENC[AES256_GCM,data:9BPBh11J,iv:heKVaJEykZTceJG7P4ZJvDYxjxE7e4nVCcsmsiXoMFI=,tag:ty+wH44esXBfEmxNh/dLsw==,type:str]",
"read_only": "ENC[AES256_GCM,data:fGOCHns=,iv:ZJcy5VYy5U8kgAa3aAZ1/qeWigyQiaNUcwBmmrESEsg=,tag:uvTH7v3NdiueHHj8d1H4rg==,type:bool]",
"sub_path": "ENC[AES256_GCM,data:bWyh0AgFljIEG4OBUw==,iv:Y9pXCavRl0nZvZ0CheZ22lVa6y7L1tQPZJnulcQvQ9s=,tag:un2PgzfEqN++nWAbGVjUow==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path_expr": ""
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"mount_path": "ENC[AES256_GCM,data:YSJJH8EB+VxRiUMWuRKjM3/grxb2cp2rrtwX,iv:B19AleLkApMGKEHpXMB9K7VxY5XHMLPYxlw7+5obJmU=,tag:Xj0x/jpdWNUbYGskiDBmqA==,type:str]",
"mount_propagation": "ENC[AES256_GCM,data:Ksb/Zw==,iv:agaxc2OO5YEjqR5OixDUCYqFX52OuJUWtZOcGPR/EUM=,tag:DdVIgJ1Opp42PagyQS4ZBQ==,type:str]",
"name": "ENC[AES256_GCM,data:HDA7uA==,iv:ZjUdqxNuIoQa5LrHxUd9TBlTKSb2Z6RQHmZsXDUuQqI=,tag:NIC+aLRWiazwIL2pv9pjiQ==,type:str]",
"read_only": "ENC[AES256_GCM,data:N7tJJVA=,iv:BlUEjmP+tyfkq3v5rrAs9FejlpeBf1IFvX2rnJgdCNc=,tag:he3n8IjRkSanMHQ6/CO0WQ==,type:bool]",
"sub_path": "ENC[AES256_GCM,data:JN7Opg3RNNmhwmAP,iv:WB1QLo7/r0gIOyTpyUX94iMA/rUQc6Gr7QDc8MRh5pY=,tag:6HgfRdBphb3sJk2MuWY+OQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"sub_path_expr": ""
}
],
"working_dir": ""
}
],
"dns_config": [
{
"nameservers": [],
"option": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:JFo5/KU=,iv:DuKbGt6zcqBoH4kvtdD5UAItLRPMUwfa8zNZHjq643I=,tag:LbijEhXwwR+T8YzP8N+2DA==,type:str]",
"value": "ENC[AES256_GCM,data:7g==,iv:8DsVx3J5HGi5cSfXWg05TPolNVQ38XHipOBJXGDCmHg=,tag:dDOxtPWq5kpVCs4jRspyNQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"searches": []
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"dns_policy": "ENC[AES256_GCM,data:EohQuxz3En0hYKTB,iv:dwoJwCOHtp1GgScGQOvDTKEgFPXWXt8Uw9cUm+LMvkY=,tag:8pLsixIiyOC7FKxYwpQ59Q==,type:str]",
"enable_service_links": "ENC[AES256_GCM,data:7pLwhA==,iv:KiZSC6pmhVliaZIQ9yVCWiTohnEGeavwMQXIu7w3QY8=,tag:x3XZBoQ/ZI5OEGt+3XcU3Q==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"host_aliases": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host_ipc": "ENC[AES256_GCM,data:2jsif3k=,iv:pssWMKdY8+ih+RGQjFYl8n5cULhw642nhjqE1ChKjEE=,tag:4whbafNHKhhfZdyHojwUyg==,type:bool]",
"host_network": "ENC[AES256_GCM,data:+SDNffg=,iv:mzkYydVw9CmKden4ndiOhs63rgrAbz8H06zqjtpmAxY=,tag:+pTjVO1n3E90oNEH9xZz9A==,type:bool]",
"host_pid": "ENC[AES256_GCM,data:oJkQMPk=,iv:v3tXA/BAcdzYb6xBhLHIe6kB2/KpHFBCNwk5J5L/B/U=,tag:jwDYbDa5dcD5TtimoJlsQg==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"hostname": "",
"image_pull_secrets": [],
"init_container": [],
"node_name": "",
"node_selector": {},
"os": [],
"priority_class_name": "",
"readiness_gate": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"restart_policy": "ENC[AES256_GCM,data:WfmhD/SR,iv:3hXZ2NP1aRGnr0DV6fxPJbrtZS2UYtjiwhW4/QqEcOY=,tag:8AvGflQNGh5CNnImIe1Z0g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"runtime_class_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"scheduler_name": "ENC[AES256_GCM,data:rGr7RCr33nFEY2o84UfhE1U=,iv:EHl0rp0jU3/hFdUtI0m+hWvMOReDMGmp/TOLMfJzm2k=,tag:s5StYIDNBldaaAwEeLCCww==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"security_context": [],
"service_account_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"share_process_namespace": "ENC[AES256_GCM,data:5tIr4b0=,iv:HJh34QoKRyV7xDVnpq4s/IeozxnaBD9K+I0/wut7M5Y=,tag:keHTC77+kn7N1oZCPj6h7A==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"subdomain": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"termination_grace_period_seconds": "ENC[AES256_GCM,data:R0M=,iv:02sJN3B3mwtZxsZ7HPHavBMe/9cvcmyvFyr+52fz348=,tag:YetGF51Fy+Qwbn8QzCoJQw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"toleration": [],
"topology_spread_constraint": [],
"volume": [
{
"aws_elastic_block_store": [],
"azure_disk": [],
"azure_file": [],
"ceph_fs": [],
"cinder": [],
"config_map": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"default_mode": "ENC[AES256_GCM,data:0ClEJQ==,iv:q7T7bU6E02alr70ldVz6BLc2hVolU32krnNJPAlGwOA=,tag:Oh/2Hd/E4doKusWM+6itHQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"items": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:GkfiSaC/l4wF6FhCbltGww==,iv:DDTcllXgmDy8RyINlBfncjmoyPGkwYgXpqGuBJnGEk0=,tag:tgooaX3JO83WqCwYxe2E0g==,type:str]",
"optional": "ENC[AES256_GCM,data:uTO6M/w=,iv:6vnIMjcib/D/pgUMoXwJtZa0nHS9qEGVYOCPsa1I4sQ=,tag:ie9QGVhuoXlAo00Ci0R3Rw==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"csi": [],
"downward_api": [],
"empty_dir": [],
"ephemeral": [],
"fc": [],
"flex_volume": [],
"flocker": [],
"gce_persistent_disk": [],
"git_repo": [],
"glusterfs": [],
"host_path": [],
"iscsi": [],
"local": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:39vA93lL,iv:5vgdX5cOOSkk0qa7opjp+J5xegJchUPx4ciejxXVgwc=,tag:XxigBNyvTNfGJj9dcn0gVw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"nfs": [],
"persistent_volume_claim": [],
"photon_persistent_disk": [],
"projected": [],
"quobyte": [],
"rbd": [],
"secret": [],
"vsphere_volume": []
},
{
"aws_elastic_block_store": [],
"azure_disk": [],
"azure_file": [],
"ceph_fs": [],
"cinder": [],
"config_map": [],
"csi": [],
"downward_api": [],
"empty_dir": [],
"ephemeral": [],
"fc": [],
"flex_volume": [],
"flocker": [],
"gce_persistent_disk": [],
"git_repo": [],
"glusterfs": [],
"host_path": [],
"iscsi": [],
"local": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:+AhaPw==,iv:YDrHLEAtR3L0moSqgqMSX/rZhJKwCLazSuuhtGcDcJY=,tag:a813TOVZ/LZ7aCa2HxvMaw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"nfs": [],
"persistent_volume_claim": [],
"photon_persistent_disk": [],
"projected": [],
"quobyte": [],
"rbd": [],
"secret": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"default_mode": "ENC[AES256_GCM,data:uPmINA==,iv:R3V6KFGGKv0kTREg/qJGBUONZNy+R7CAy6zOLYclaJs=,tag:p6OTrWalJTe9gkCG/3dwgg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"items": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"optional": "ENC[AES256_GCM,data:52nIYvw=,iv:9fchTM1D2I1itl1ybczVnmnOKTD7UgsD7/PTKSyHqL4=,tag:1WE6ZTmNTTYO6BKvEJqXXA==,type:bool]",
"secret_name": "ENC[AES256_GCM,data:0w3cxXPWiDEQ5WK/EOg=,iv:ZLk8jVQBAaXLbqKNFrk+XXrnCI/y14JUtjJ+NDncrGA=,tag:DzmhrdubObSsKaZpQS3Ryg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"vsphere_volume": []
}
]
}
]
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_rollout": "ENC[AES256_GCM,data:cHVLPQ==,iv:wx2MxKFg5SjgKr8UA67ygnuEzihklUY5idMsOMDy7+g=,tag:4EAuftjOHmKdFR01ccN64w==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:7umPwhpc5to=,iv:WNuVk+g24wDThhA2DQ7qn4olHoenmJY2/p3+INWYQdY=,tag:FNJjDSPzsf10crVnoaYWSw==,type:str]",
"value": "ENC[AES256_GCM,data:xomrFw==,iv:UATy8slkGXEq0P2WxbyBfi/pyhukfrWB/BSUAA7L8rM=,tag:ZikrcqF1+/1jLoo+9wqu0A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:LNAfrog=,iv:82Wxom39SKo71NC5CsE+YyQoIaHNNtTjWfN6cyJUB5E=,tag:sxsdBbK3tmSif5sPuZaQ7A==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:uQ==,iv:quVQ0KsW8vaOtUuG8dOLIfLsgh5VZ4D1PqkaFDug/CI=,tag:LcanPKgtgwhrRab/IX4Fcw==,type:float]",
"type": "ENC[AES256_GCM,data:Tr1l5tly,iv:XcnBqFmcFTcICYX+jR4jPHVNbMADQrZcTRw9eKdaD2E=,tag:bdxWJujnWGx4eqJzj/KwUw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:Z57rAPWxGNU=,iv:u+KS4BEb+JfNZlz7+vZlndHMcwTLHO3IGLtwY1etJrY=,tag:0CP/N8tN8m2fZTuAahn3TQ==,type:str]",
"value": "ENC[AES256_GCM,data:E4lkwk41MeU=,iv:2yLZRQeBVt+jp8S3ZJEyE4JR8cls0VmpLhIBskvOa0g=,tag:5Y4Y5j7eBCNyCOXR0Hz/rw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:Q3HsDG0=,iv:ZGC8IeqwnaF4DFVpA1JxmyIoVDlQz74jXMBk1cHs8IQ=,tag:BSRIQj8XqT0RCGd1b4kXXw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:yA==,iv:7Q8a+raINjSBU+akbJk1hN5KOT6pVNRd6AJR9QRNmFA=,tag:T7X5t3dAlMmlitABGA4Ilg==,type:float]",
"type": "ENC[AES256_GCM,data:EwRo9cat,iv:/bdtsHQpLD3ObI/AnOC5XwpQI5V6o6BOxgTSelmKWao=,tag:0QnRIPe6u0E95p14CaSKQA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:lIRG7VC5uUM=,iv:OUzMBPtohata3uqOhs43pHhOtcr7Z0oFEWN9dZuyixg=,tag:n2irQM+1NGdS8DEQIiyiRA==,type:str]",
"value": "ENC[AES256_GCM,data:hI/fUA==,iv:OEMC5fpJEFHYWFLcjfPc/XuxcJF/s5i1kv2qSlKPARs=,tag:kNzX+eRIiyNel7mNUEetZQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:FghDRCk=,iv:KljcRBKSz9pqixh08ZY+xMefe3XZw304b/YtAimbbuk=,tag:KECd7AQRpcOrwAHKUYQOTA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:QA==,iv:LGUbWBVqbrSkOKmHw215sz0G3Ipq8JwHr6CT2Y5zKMo=,tag:VxVFSa++WkIplqi7mWb6tg==,type:float]",
"type": "ENC[AES256_GCM,data:VUqN4xiU,iv:f2Kum7+mvBeNDJCn1Rv9uEHWJUqLfFHFNeI45X9XH04=,tag:YFtyOV1kBS/hU4/10D40eQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:vBpHGPKepXA=,iv:n8SQA6/p+1SdDw26XbsYUnTGnYb5Z4Q97Md67vq3HLU=,tag:Rgev3d3YnSTN/wMELsDrQg==,type:str]",
"value": "ENC[AES256_GCM,data:AblQsGGeu+2u,iv:ltl8gH2fK7WbM1auf8JlpdowzBMCe5ig0DyGlxkqJEU=,tag:d8dIBNVRHg+0wwVbMpv4OQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:dEGgO7g=,iv:xfPpBHRYcnNjz2a4l0wD3NFbjH/iWFlZwJd7BUNsMzU=,tag:UcVM1X6tgXp02VaUfQeT+Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:EA==,iv:x4AeoUIUKF9kIEgPYIYwbLaOJQRb/KKqEdcJGaj1ZHk=,tag:3wIocNzGonWhLgF79+5fgg==,type:float]",
"type": "ENC[AES256_GCM,data:pIs31gLM,iv:VDF4gXR7Bt3wwUsxlQpyWfIycydT41IqCxi+BXJSIds=,tag:pYADjnqN4UetYU+PiKqxLQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:eak07c+Ab+M=,iv:8Rv9TZ8/R4AByPZDWykUBeo3XffnkoLOzHjNcgm+0oo=,tag:MwT07cA/YsJehnmjkpXInA==,type:str]",
"value": "ENC[AES256_GCM,data:muxG,iv:ptVCK7xY5lif/S7JhstbUE9Y3XJMyg5B16Ej4OMCPuw=,tag:5M9VWuGoI5VXP9qbWwLuIQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:pIKwVbA=,iv:mBD0raMISU8WOp2T+D/76RWtwBcQG04KuqeHSHpfVGw=,tag:wf9owJ/0SzTbkZJQX64g1w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:3A==,iv:IE00fkavYHDpPUBTDYpyYxV+3pmtA6eves1VlXihGmw=,tag:bY6Qm/c9RUQk67RBzzVp2A==,type:float]",
"type": "ENC[AES256_GCM,data:BtPa6TXP,iv:Fx/W+okb8593s2odTYXh0Z5pHYHPh/nVtSYk7qKMtM4=,tag:mQXC6hM2huer9epiF/nH8w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:yXvToTfHiLE=,iv:EjZt9/Ijje/FON6VyqaEuQmA9VTI5hVDwEproJ/wpjc=,tag:aKpmpi7JFN91Q9/TMlxHfQ==,type:str]",
"value": "ENC[AES256_GCM,data:767RXe0=,iv:dNckhhuuxHodSeguKESdmLEOtglM9ESSG+rgDkhZM5I=,tag:Ds+pf8FYGnDjedHiv3eGGw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:5qpdDntd+089Fc/ZVGuz4PJHhFoVwXQrz1GEL4ZPrZ1jJEa3Jbh0F5vPkOp9nIqx4Vzzs3XUWeP52rSzrvmqjvkg0hVAXnH77rmX9ObGl8JWI5HZk8uFm6GLrVrTmEqnn/PYBoDGgkCik5f+A8uoJ0zPPT+QWZq8uIRfQ2uuL0LMOY6vIoXcaX0qpTXq4f8xNTNBk7htq/WF7X5qkSkV55p1A73XY14uQ9xoFw==,iv:eNRmfSqm8p+6fQ3m3F1U6BjHhejcrREC2Ad6Lv2VZOQ=,tag:WiMLSydnEc3Cr2Punk6rxQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:NpT1dpD2m4GkMcWRsJtoUPi7i9Ki7gI9qyCYWhnIvw==,iv:Uem1M8dUX6NPubNer3OPEJCl7yLhsCe3W94DPzHaLsE=,tag:Sh37bqQjcFv9lxSHyVfycQ==,type:str]",
"ENC[AES256_GCM,data:NpU7qMjMnEyQ6K2NDcthr91S3vVBVuV4aAzAGkD4vyy8NTBgm+Hs+FZMnhZIHEMXuCQAlNJQFA==,iv:yG8mLutgmrsFdrNsRUUD46yj7WQDFwlMjpnoX0wlNGI=,tag:fc+SgwRnLiDx2Gl565E9Tw==,type:str]",
"ENC[AES256_GCM,data:84d6DGUr1C+c4i2Chze+62NzrzRmBZG1YSiLXIBLDdM8YZaf8ywBgygGgTkbhPn6xA==,iv:iM6ImkRV5W0WVZpagrQHJKGS2mj7qrIEILBu/pgmUuM=,tag:im7YuBapyAIZZz4TnuiPJg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:FRLiheY1E9mcu0izUt9RwQ==,iv:ht6JvjJBrtK62NU70XBZ3dG8faUe3lnLTrCJkT3J7wk=,tag:jJL3E5Pol8juTf1NLeqrjQ==,type:str]",
"mode": "ENC[AES256_GCM,data:A3d4e7TV+A==,iv:OWqTVzsMpHtx3fBW1lrhaRdcJTFax43JMqd5yePG58E=,tag:RAjsa0z8IXgsHwq1/MHQtQ==,type:str]",
"type": "ENC[AES256_GCM,data:jVEc1DljLhHw4c7qQG4BgbzAusA=,iv:LjWPPKcLLVeku4fUdaGjsYrIliaQvgwc9WFt8nxUves=,tag:nC4KzWFEg/AJFrTwiEdorw==,type:str]",
"name": "ENC[AES256_GCM,data:XbaD20d2eVCc,iv:Xz3WeOEH5OHd7ex0/ZG8hQJ64IX4ddiAuJTAdauQxx4=,tag:Njccw/ke0PXTYT8QBFmtlg==,type:str]",
"provider": "ENC[AES256_GCM,data:/SDbeNfECGf7yKMBSQl3sRm65+nHhccDHBwNH4gBS8mEl6O+saiRzFfaLOI26ilj9X9f+659,iv:K4DCyYASEmdbsV+slzf2PZ90f9QmOpos2+VGsOR7gKY=,tag:599jQ7QMeEMhUN0szMmrNw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Lw==,iv:NGijgjVmHOqp3mX/bx7UOArNsGkZJqnICPuRXcsHZTY=,tag:JHEmhkFjNCa3G+/8+AXPyQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:0SWf1qBd89nU,iv:A76AKjM8F0omcYmruThpmHTDEZfmKX+brX7fFWaGz1M=,tag:whGaCN1mWhpYg6o5iBwdBQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:9Q==,iv:erhGWtAyvlhTGwap7zrqmwoZNbgWzpbMdXMGGTsMp1A=,tag:+mdHe1GI/eM1m0XJSgYFjQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"resource-governance/custom-quota": "ENC[AES256_GCM,data:vSsntA==,iv:b369gnoryQwNCpW649AMAZq1x+YDH2qaRe4yQ6kVAyI=,tag:WnHidA1YpU4o/VIx6Vup6g==,type:str]",
"tier": "ENC[AES256_GCM,data:0vYpAB9JYBb1,iv:fE8rYuYeg97ylT6j7oeuT+hIXcovYXWP5OQ9FpFC6TI=,tag:/Q3Er9LRN/pIZHfezX8AJA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:xyLsbW8S2JBS,iv:JDh7MkGPGLhPBSCLWsMjirwKeSF8nC/qgmv3zHuN0MI=,tag:/PgUBNu5xpwjqDe4Q7UB8g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:YtCoLmy9zVQn,iv:hZDvO24tHuJC0njdAecavMVrIiBKUQJzruQoTREDsp0=,tag:cHkIsA1FJ325ZN/rWHdh9Q==,type:str]",
"uid": "ENC[AES256_GCM,data:Drq6OiIQ/7OYZjzSxfUZyJ3WdUQWteNDr2CMJ3AHgGehkMmT,iv:RKPinJjUHpDRbWMQ+4kPkKj9F4MAMI3lsc9mmui3k/Y=,tag:oCpZw1X3BioNVx5cdHWg3Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_default_service_account": "ENC[AES256_GCM,data:4MypFIc=,iv:wT9+9yNBAj7krBzZLA1kdlJGuRSHuxgCy1BiRwJDnro=,tag:baNBLUm3Tw0G4IkeoCwHKw==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:J8yWvcNWnKgGUEgvkk+LHdY77ReruZRnOoNbk5H5Fu11NMihz1w0vAFzI2MIyBftrZeCiNJieLkzRSH6l1bFe8d2lyl4wp72MO3vNjitwlwyCbZRr2xdxA==,iv:2ljP6peljxAEWZFnjzng+dOnRz6QJVBVgkW2Drp+IZQ=,tag:Pc8iwzzkem04I4VWp2Ck+A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:JRjwrZ1gvptBY3bipU2XuQ==,iv:aeQzZuYgARphpReYMt09H0jZdQ+1qtEn/Th9zUVKc/s=,tag:89P5L2pHh4rwMeRZDgKurw==,type:str]",
"mode": "ENC[AES256_GCM,data:v4UyOkQidg==,iv:aKkH3JKIe+Hs9Cp21NkuDYxRu9qZCJiobIyCrEUXI0Y=,tag:Q5O+7EONY4O+qLoKy2pdyw==,type:str]",
"type": "ENC[AES256_GCM,data:U1MF+D9CVDOuLCZ34cQcWq4lgotKS8PYGA==,iv:kqeu1upyUyONBwiVh2gkxGlOwZryMJtzyhL2lBpv2sc=,tag:O7L0RgjHuB7FPyc9dgsSMg==,type:str]",
"name": "ENC[AES256_GCM,data:gO6r9XijqNoG,iv:l8uJYlof4njVe9PaQ70Kn5PnciaP0jFnHoIFdTYk830=,tag:Ji1n+yvdyH+lErsh6ICOpQ==,type:str]",
"provider": "ENC[AES256_GCM,data:cXyEVunAjTUJXpmDZ6jyjs3KMdMo7dLwJzAdGWNFhRPtMp65K8QS41rcTm1eapLaACPdTN3b,iv:s7nG3YvFnMfKugSQRTDC+A9Jox8OnNHpA97QSA85zrE=,tag:H7o/9AWwELBZ2dW5jRp4eA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:qw==,iv:Q8/VsY2OTN1ea6lCiX2IXpqrzLr7HPRDcPvkFBwVWiA=,tag:WXnORyueuu/362ZikCs2tA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:zJTyLDgLaHJ4SEcc5G7LiHVJoYXfrn3hCg==,iv:/oaZ8WoDIw30hvzmmTL5IHFXNIEi+yXwn8D6CR4Q8HI=,tag:xgOcwepUxLYKj4V7PzODGQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Uw==,iv:BeiaAn+1blWRu84rsCanrN5Ahfj1u7/Dq1l9a9DZ2LQ=,tag:xbjKT4ULfL7hzOAs9VsJQA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:qsrF0B3V/UaNnc+A8AgO,iv:bMWh/x5h2GGhfbyTelOmIA5pdmEFkhwqwYTy4bCbQOE=,tag:m+ksbmGHy8/lbEABkWgiMg==,type:str]",
"namespace": "ENC[AES256_GCM,data:DnqqMRXBSsrJ,iv:JnWCsdI/mrB/XF2ou5ni/KB/DfxJBuSlliyIHpIeIrA=,tag:n7qi70+YonDOEGhOqrZRSA==,type:str]",
"resource_version": "ENC[AES256_GCM,data:ORl/q0zKL0xY,iv:nfTSQNFHRL0zUu6rh7lpuV3ogKe+hGkEeBWbMbDKURM=,tag:aLs8y/8va4R0zKhPG+k7rw==,type:str]",
"uid": "ENC[AES256_GCM,data:zSpRuYUDePHVSeuSK01tc/NIAmAbFt3O3cs93VEXxgX5GCT0,iv:NL/V5Dxcvt5oVmtRCG8JdHFcDWKzz6Fplvn4a03vK/E=,tag:uMiNYTJmAqxPOskPMIbs7w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"hard": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"limits.memory": "ENC[AES256_GCM,data:rqH/GQ==,iv:A2quyudSgqIXjDIf0KBbJy01VnpbQQ0sD7WFK3nQj8A=,tag:X2cXuR6RMQ/4hr9YRWWc5A==,type:str]",
"pods": "ENC[AES256_GCM,data:b9o=,iv:irO3WGCViWp31b0Nr4GMKK3aXtfhWnuer4+YUrvnCLM=,tag:8/ffR0RtrHSRk1vKVlQ8bg==,type:str]",
"requests.cpu": "ENC[AES256_GCM,data:6UA=,iv:ftlk33NKkSYK+mLOloyKZtDp8gX7hXZxQ1EZNWeZfHM=,tag:lWeUyKEuboFZ1Tuy4s7R7g==,type:str]",
"requests.memory": "ENC[AES256_GCM,data:1nY29w==,iv:4eJUXpHvbSLv/NF8tNyx4ag+Tt+JmweTYAIBU1BxdbM=,tag:l8qWc3bU/iyi8y6XrIziGw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"scope_selector": [],
"scopes": []
}
],
"timeouts": null
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:2zkZwCke8uBPkXdv1hlR4l7smD334zbM0nLEGA1TfQLImp8+GChOAdpI1hmrG0twINgE7Efh8ASISVpRjg82fMgIXquOWsnsPbWqd5qAVM6WXEhYVJ3P/EP09wRY/T4N60xpvbel+FETxMiVzhW2vw==,iv:jvcLLsBzFKKkDAvReyz/eeD5qhWMUWH5ZamIoEVoqzU=,tag:WRA1KT/a8BQBJLxmnpNERQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Fun9NLELQO4xSaBAtKWXvxf5DYl50kfhsvAP4N0Rgvq5rEiXEdgwPiYpa6lqXu0=,iv:IegbNzVuMWMK9xK7UTl/l3SK75U5DrlUbP3Ee+c81u8=,tag:5PRZuCCgdl10H2GTiIlVIQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:Kld5kUA4xwtDwXxdcAsznQ==,iv:+uthzSpKcek21DfdYArkdXl3iVpr307h3GChZyDvYAc=,tag:heelw36EcmaDH9pWtivlow==,type:str]",
"mode": "ENC[AES256_GCM,data:deMe+eo27Q==,iv:8FICIrI1ILVGhVd2Q9gziZedcU5xeDauZ2b7mFSf65s=,tag:b37tyV7Rny7LFspjQhDtSA==,type:str]",
"type": "ENC[AES256_GCM,data:4YbSKuz+EKD10xyklCEJKCU=,iv:Q+CF5VZBgrOy63jkNjiS1nyJzpbQ76yDzd5plRz+hY4=,tag:x48B8lQmQ+/5TgUcLmmDfA==,type:str]",
"name": "ENC[AES256_GCM,data:InmFslkVLqUIoX5lpMA=,iv:rMvaTwdwfwVWSwTsYJlwwnSa64Mxxvbr3m7QjwYexiA=,tag:TuERQ4UCxfyz5umXoPuclA==,type:str]",
"provider": "ENC[AES256_GCM,data:WUv5upp/yF29ytHARGbKKcpvM3pGWhJlRD1EEYZPL2bg9FL8XqUm1lJO+hzgsNu7VCzrITVT,iv:1Q5ivXARmzcX63HVUtUjpdBz+nvh+wpCOW9oTCZHZtY=,tag:ku++mpbEg3gDq3b3gtuW0g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:IQ==,iv:paJWsRoB3mOxx97fGUAcUezGfCRKTOiUpUw31eilXpQ=,tag:7JfQYYjJ7SrU0AOlNVhEtw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": null,
"binary_data_wo": null,
"binary_data_wo_revision": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"userlist.txt": "ENC[AES256_GCM,data:j4c6BrBS3vj0c6QCqoMwGxrCUUAozTn1pTNCQGci1A==,iv:ZlbvJmhQDvv5/H3/or9fk9MRHo8qvGsW1iVAFI4QzWE=,tag:MgXZG5mwsYjmKGnuRvFpFg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"data_wo": null,
"data_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:KhfprCzaqHldIJ6KHmkimh+u/XyLp56k,iv:XL3sDi5X17MLAWx48I/V9AJrbEf3Nx1cGDK0GZH26Bw=,tag:6c+W++aWT70/xhTtSVecBw==,type:str]",
"immutable": "ENC[AES256_GCM,data:juigeW4=,iv:Ui0yuuAsjzSw/2Wc06ZgQKyEYIkCKcpJWYb5fDeUS+E=,tag:UpT7MIvF5YZnDGHs7Xlb1Q==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:qw==,iv:szPXQXUYRQAnYPx5LTYvujG1F9kUmImVv7Dfvuzoi1U=,tag:ZlujkNrytqs79PCpqiHfng==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:30pid3/JS3Cr+Nt2+ko=,iv:tek5EtDB0RHtFJlT5FDG8IgDXIWKVB4KOSGjBGIENwM=,tag:uficgsE5ZgxROYwoMGp5UQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:/eY5kq+kKKcD,iv:DjyOZmVXzkxtLc+HI5w59Tc4WjyqQVfF11bQI7VQGCg=,tag:1GktCwcnjpHwkMjfrG/SZQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:+au/I+UOy26X,iv:7P83vQdWZXU38eZxOYH415yvqzu9i5HPtbb1biexxm4=,tag:dqfWcBKNYQWfwg6OBydEgw==,type:str]",
"uid": "ENC[AES256_GCM,data:tpRAxPSk6WIYCADAV0EALdVZg2H8rZ0G8GLOZGoKd16AOaBF,iv://UAnS5PZir3kQIfEGh8hH3wpUp3nj7QQTJEEz2zZX8=,tag:PbSkUQWADJbhc31VYDTcKQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:c+rmOOZ6,iv:aALarYyyw6ensBOc48Wty0f5C3wYPBafDT1yqjrVvqs=,tag:Izg8CcXpMv2Y8PvksrXbcA==,type:str]",
"wait_for_service_account_token": "ENC[AES256_GCM,data:2K+syg==,iv:SxOPU/ji4aE9LUyJZJ3aIO9Ajorg2CbQxQJAyxvGlew=,tag:u5mNoCWurqILWxPA6kKdNA==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:tzyPKR1E0qo=,iv:dqHS7t2xlgRHS/BY6BuSTwemuwZi6s1+Z2d7C6lvP8M=,tag:Bkq8KOlMLZ1l0woLxGSkXA==,type:str]",
"value": "ENC[AES256_GCM,data:qRpqOw==,iv:dL4KwaujwRqvOizmfScH+HFH4OTOcl65pvAAkhX8TIg=,tag:0fB9rfk56rGYT9NyPszm2A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:uGU25KU=,iv:bH2JwHu59e2+7SF0cE2hxZIO9/duAIxpmmU9W6S2fHk=,tag:73Xi8xTYzkG3Hdc0ptnxUQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:Q9QvWxwkV7DLPYsb,iv:MtDlU+0J+g4eDiGozRVHWREU+xR6DAb7SBCOH51oj9g=,tag:OKgBpwcUr2i9lmQcyS33Ng==,type:str]",
"type": "ENC[AES256_GCM,data:/JU3YHrc,iv:59XlA8GCi3HzVBY405JD20kd2BY5QKjzrAlhsvr9qqs=,tag:VEeAaYKqkIOnG0c3TwAYFg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:d3+JRO4JyqOsY6As4TuP35dEknHhWcXSk9mHwSZ6VRkIHo1puQ495Ttvobhh7evqAON73zibUZY8XQntltT6NjCAdO7sArNL6YPrgMnEAwClAYbB,iv:YZ0DYpr41/Ll7ATuwhDCIccjvX8Aaxhx9bD8GHjFqnQ=,tag:97P7GVbH6Op9HaXX7AP9/Q==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:Ts1atkRHLg0pWCOG+YdJF5gQKgU4Vs3I5A4h5Oq+7w==,iv:K9C/BZZ+8mSNyBMs3cO4WEzoJ3/FNN+p9PTxKwFqKFk=,tag:1ob1I6bdDYIVE4gOO8qkVQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:TuwlN/YMNHY7AedhA74n5Q==,iv:WSCakc1RR5LD/eSf358Xb1RxppF++j9TEalWVa9G4NA=,tag:MjGLNQdmpcz6Kh/9ZY7/pA==,type:str]",
"mode": "ENC[AES256_GCM,data:51X8KmByAg==,iv:BwxENGN8+fjc8S62sVXl4fkC57PmJYc7dwE6XRgP/7A=,tag:jrsxw4t5FlUG+e3xZGs7GA==,type:str]",
"type": "ENC[AES256_GCM,data:r3MNrnA0o5qKO/BbnMIKZP9U,iv:IYVqeW0eP3IZ8GZrNBAnR6d9mc6+afshrRgPtvinioc=,tag:m63W1ZPXHhUqhhETmvVMmg==,type:str]",
"name": "ENC[AES256_GCM,data:gWLCeydmk7wr,iv:LFB4NW9tYMHMGqHhl34qJTpSz7LG8rn+psOQXuF6Xi4=,tag:+iaLCli4LEKsdWpbU2njxQ==,type:str]",
"provider": "ENC[AES256_GCM,data:qV56bprxOzeqKO93MkbVYQbIe5gHLZO7xs2OnXxdLmHVPzFFjDCKePevo+wSLelPdQS6knd/,iv:NmR5birZOqV31tRdRTRsf+iidnON+9v+0CxaYxTM708=,tag:Mmm4kBB/IOo2BKpKEVYCUQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:jQ==,iv:dCi/bcBz3yNmpRFIEW7QPTuZ7w5woIIwb3drceUp7fQ=,tag:X/kR9PYxtda0lHg7fBcKzQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:QPdp0FHIQLMNw2Sde+16NJfT/g==,iv:RnW73iAVgtSudkiJeuNMhk1wHXJyczmsRRENpnatGpE=,tag:YGWjcyvJtw5GR+56SJfqOw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:mA==,iv:Mps66RLDCIHOLFjb2SUK6IG9PdhLifwJI3PC87nd/xw=,tag:vyZDgcoMD8AuyGwatpTiEw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Vo6wgxQBHezv,iv:gBA38yWBWMBDWccFvQS4767Dnumk+oy83YKRWJJhn0w=,tag:/HAF5CeVe/ag/QoI0aaI5g==,type:str]",
"namespace": "ENC[AES256_GCM,data:lAMKIA7yx94I,iv:6335zBlh+HvRVzOKd6Iwg6yfFnfwYRpN/pYqJ8QyRaE=,tag:ljsZOVMcUqd0v4StALNaMQ==,type:str]",
"resource_version": "ENC[AES256_GCM,data:sVN9jAi86uhx,iv:bjAMvS5vCuQ9MF0SRLg5E0kgM5/nEk3mapZ1zK8uqJE=,tag:WGrchvF/xfDcmZ2yfHO2Cg==,type:str]",
"uid": "ENC[AES256_GCM,data:Alm2AeN3KiUtN7j45IbcoBkG3kQCSwKPsRcRJM5pZBG1+mxu,iv:klK7kT5+1h96wJG1HepS5TqxkFaTW9U9E8RB5kj3QzQ=,tag:ARD8Hjj7UPEuh+n9KTMx3Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"allocate_load_balancer_node_ports": "ENC[AES256_GCM,data:iJXYlA==,iv:WkdnKyXa/4HrGltUfneI+Qqw2SJpwGb7jY4wumZz4AY=,tag:oO0Ke0KkpDsIBrjQb1YNIg==,type:bool]",
"cluster_ip": "ENC[AES256_GCM,data:2/idiJgoA0YAyAL9Vg==,iv:gkp+AAmLSnZhpnelYlqqB6UwwyFwra6nFTRXHQs5Vt0=,tag:+BglQ6RuoYbJDdWaToUMnw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"cluster_ips": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:AIbEYvZ+p2ioRYnnBQ==,iv:fehypq6eVoQGkOwIBakFqBLSuAWtCxL2gNnX2S3hJjw=,tag:wvPeKFYgAu+QQ4m3jYSSyA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
"external_ips": [],
"external_name": "",
"external_traffic_policy": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"health_check_node_port": "ENC[AES256_GCM,data:TQ==,iv:WhF3S3wUHqoOFYVFW+ErLlcDUGuZSFvL7SFuU5dVcfg=,tag:L5IKWys8/kMy5N4nCeGR8A==,type:float]",
"internal_traffic_policy": "ENC[AES256_GCM,data:HydNrchaJQ==,iv:VDApL9g8Ze/l13ZE26TP87r9BHMQZbOATMVcfZck5ak=,tag:j1ePPLbaZgEla1Gc29oKqw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"ip_families": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:IL14Cg==,iv:2D1E/TXzPaNMLOoyZH+9sUIhE3m/CWMerJe0PNCPvcM=,tag:ed+OqQT66SGXmPlksNDuKw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip_family_policy": "ENC[AES256_GCM,data:UMedJpCNC5UIGc8=,iv:Wv8Z8tAzZV/gyo1Bd3CFbG6SEajwX3m5kxVUifsDHM8=,tag:/OXfl6cb4Y2BnULM9V0DMw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"load_balancer_class": "",
"load_balancer_ip": "",
"load_balancer_source_ranges": [],
"port": [
{
"app_protocol": "",
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"node_port": "ENC[AES256_GCM,data:cw==,iv:ex/UGYotg8Vp7pj6RnRtFyFUxVDUq//1A2qSfsxYfAM=,tag:3KwU5CGNzHc0wF4qXpv3cA==,type:float]",
"port": "ENC[AES256_GCM,data:dUeSpA==,iv:502Ycz1KYCynQO3bMFNrOuLZ0FvasKLeIKe4Parpi5Y=,tag:yOj9/hK9b9ZcPj8D9X48dw==,type:float]",
"protocol": "ENC[AES256_GCM,data:X+qf,iv:+VDIN0tRbz0SsQDHCoWMuou5ITZmw2LePuYnKSITpZI=,tag:yhIcQ3Vsdy94eKoqwS7Nbg==,type:str]",
"target_port": "ENC[AES256_GCM,data:G27RAw==,iv:IOrJxRWVfYVVzKT+W/79NoWcN3NJdtxMB05Y+/5R69Y=,tag:ndBI+Wh0a6fGJkzMDmeh3A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"publish_not_ready_addresses": "ENC[AES256_GCM,data:PjPE1Fc=,iv:Fl2KHrixmmw7AyPo2X4k0wWuu5CWSjtxmTBTjbyzy1c=,tag:mOAmnz+Y8swPWs4GFTP/zw==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"selector": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"app": "ENC[AES256_GCM,data:Pwv3N7AMzv5s,iv:CKNwdEc/tNtSmXQhp9ZywUhExntZpVtIsT8PUm1IDqo=,tag:8vmZHs+wPv3MvjsEXgfmcQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"session_affinity": "ENC[AES256_GCM,data:dtpU1Q==,iv:8ViJ4kSurayeyY1eBqTH6XEW+gY5nBKQA7cqx5Luef4=,tag:Etfy4BQzuXq+IGoeLEkXHw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"session_affinity_config": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:aCd8q1JEciin,iv:EeuMOya1n+M7gjwmX3hAzyN2W2xbzi/0MVIplHSc4fw=,tag:zYLdL2QlMNrWZimwlFvd3w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"status": [
{
"load_balancer": [
{
"ingress": []
}
]
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"wait_for_load_balancer": "ENC[AES256_GCM,data:xgWHhg==,iv:8QLq7UrujMCguDLPNzsY1DdEeLBiquRYXURJLQPkBCk=,tag:I76Hyn4ohp3g7ptModSanw==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:ajWR9MIhALQHjsaBUiN5cM0xr3LXMuLaLRlU/ogrOyISJMK1NxySoQi35K8+3PoHx9U5ul3lDDffge8fAaZyMzQSesZG8EM9m8NQ3YuihOnsBrtkA78vzJG0EMcvXi36VmjssPIqmzIQ/mJM7UtajmmsrxM=,iv:HfQuBeDROfyPbI4z3o5P6CuTx9+d29w2a+m/npf7LJg=,tag:U4XBCAPUa/3agmpYcPtUdg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:QaY2FeKk7CcAUbV/gciDBSAuVMHAmruGKElMy48cvw==,iv:t191zUY/kqRuwqshrxQ3d5SO/YROUtNQIdCSDiuBJkU=,tag:WIo2wLlKmV0odzUuhXsS3A==,type:str]",
"mode": "ENC[AES256_GCM,data:hhwWxYC4+g==,iv:DfEx5vOQkFPNDnLAxd13pkAZx45HSsDFsKqgTstYQTM=,tag:s59z9mZVnLW5UBkmkfKLow==,type:str]",
"type": "ENC[AES256_GCM,data:RSRzk3FT8bT54xO1l47Xnlex48I1,iv:tKpYDYoPqBPY9RQtBtrwo8zbbdFpKTipG/degvjqWbw=,tag:s3YUnQlwivckSuwHsRNHoQ==,type:str]",
"name": "ENC[AES256_GCM,data:SfOXdUShSAg+VjeokXeA,iv:u360ydki5qzccifgEhye1PGDFWRctJH8Zk+8pSFbaUg=,tag:jjCu1HES4t7AGut061heTw==,type:str]",
"provider": "ENC[AES256_GCM,data:02G7yc1FkqNZwPZycC/63afBPLCgMMIhT8d5Oa0DnIdTY1Jy1BLFzHjWGJukQjb3Afaay9AG,iv:Z4QbnB6H0yLn0hXhKaHvPJPCMQpxJheFRvWVd3OH7no=,tag:06c5AJAa/tnTVyRW2v6qEg==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:og==,iv:0umN2ywkGWaqtSgNoETAIcU/wcEXMk7olom1VxJvDYg=,tag:DMNZPHVgC19kJGrbz74gjg==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:ymuy7qhE7vV+dcsWgWoj+d4VCA==,iv:Rf4HOT9rAmjNz22SN2s4AeUP1EOykGo4lTnX4Lh9sw8=,tag:tNx73SNIrk2UBFh7Mqdzng==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"gethomepage.dev/description": "ENC[AES256_GCM,data:YD/0a3JQ2bh8n3TxisAAQ18=,iv:etiJL/21mhxVv98KtupOuqX8+p1xPPCjbfcG1veoo64=,tag:+ITegjrisoP6xyYam2CvDQ==,type:str]",
"gethomepage.dev/enabled": "ENC[AES256_GCM,data:g9c4oQ==,iv:8KYSNOywgWzl8DuyHlxvAYDQnfVxWJrNwSY1EX7yAHc=,tag:1ukmhH56DEaBGHN8n4dQVg==,type:str]",
"gethomepage.dev/group": "ENC[AES256_GCM,data:rj2/bckieB9INcsbTfAjuL0FdQ==,iv:9V6deiRdZRR/uiRUnCxMY0T1Y3MacEplEYm8Gnjv6kA=,tag:C0tANv1omU0rF2BA+vLbvA==,type:str]",
"gethomepage.dev/icon": "ENC[AES256_GCM,data:Ar4ohWBhpjBDPguEYA==,iv:/S7dYYhgiMnwYbI94O6Ojnlp1PebVZd9cnA79RnWLsY=,tag:23RisDBI0/8xc6hdpXYN6A==,type:str]",
"gethomepage.dev/name": "ENC[AES256_GCM,data:zFBUGV8XuhNG,iv:CS3orwFoD3qZLqjS6u2Q/x802JqBtPRChIBHxHQAul4=,tag:1s8PDOfALZOv2oMWhKe+Uw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"gethomepage.dev/pod-selector": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"gethomepage.dev/widget.key": "ENC[AES256_GCM,data:xh51RTFHwgCqxPhbPqii5Dt9FEbsYCNUP2MCCreE7dGONjA0ixMuIEjj0eMc2VUmIYfr7+vb/oHtQNAv,iv:Lw7hUC9XG2/BBpmm89Dbg9s/QubET4m2WULMKDKbUoU=,tag:n/kDS292S0Eu7zOQIGH68A==,type:str]",
"gethomepage.dev/widget.type": "ENC[AES256_GCM,data:96HeEEyquVZf,iv:8Hnv4uTcbgb4lZhSti9TESSSSWdNvV04MEaD/IdHhqc=,tag:e7XCu2bpr/m4pmC+HxehVg==,type:str]",
"gethomepage.dev/widget.url": "ENC[AES256_GCM,data:T8SmBOCgPqc730H1qgFi2MGWMm0DDBY5ZmkbDaIGnf6u6teoGfWyLsKx+40IS3O2skydohk=,iv:jGsu5UJ2ocxtYFTU8CCfBYkKfKaUnsMzTRhTDOp/48A=,tag:RLdoxVA4Q6keWgHTvWuIJg==,type:str]",
"traefik.ingress.kubernetes.io/router.entrypoints": "ENC[AES256_GCM,data:ERfGFe7nqS2v,iv:sounesMzrzitWsScsHtKwpE6ja5BNgxsdxnVEsJNL6Q=,tag:SImCqGnm2qIOvVbpZRaFUA==,type:str]",
"traefik.ingress.kubernetes.io/router.middlewares": "ENC[AES256_GCM,data:qie+IhDwnp39QDbimjbYCANuIgU85a1gb/zs1FjOtQNaI6q1Ht5FFMlOuQ5eger10shPIyE81DFHqZoZmHoCPiwau2t0O9BfdFqeb+4/olEqq+f4BfNikkxrTCZFb2WxEjWhJMNMZm/PGWNPPI/QgYDULnqEzzYZaDPJbvm4MExRWwa4uqmfMREnI1Db/3YmxAvFHbpG+fbe+Uz6gx9/lJYcB2OBWa7kVGGsf6Jis2csdeeM59oC/yeYHIwtQC4debt1GrmdhVfA394HmjTRhtGrA/tuEHOSPAcYbzuCJc5NoKBxNPV6uuCsB7G7GdtXPeEB9C2g1x8ogeTcq22B152nkw8lgvHJKPpWhSLZx+W+MC9N9oLLfoWMpg==,iv:il6pIwJIGl6+42TJzJCG64U5eRkKextn35gbq5QoltQ=,tag:GGnVTf7ZYvizsl0mJgAifA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:Lg==,iv:PbojXp/T1ru24DqjCpqZcyUMYQ8/joQ9SzDFbvUIksk=,tag:E2Iwk/iC+l6jPZWU1d2Eiw==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:ucEOMMLKA9Hj,iv:fzPtxzppQtqvUkUHHTHkb9co+4fqK5YvRhdFXyUpbMc=,tag:acXttECxtQTKeShw1fY0lA==,type:str]",
"namespace": "ENC[AES256_GCM,data:7eJIErJ2la3K,iv:49drq1GPBeWzv9Lca8BE452Mlc8pjm6bbe2hcDoSoAw=,tag:RxrojbgUJ09Mho9YUQ8t8g==,type:str]",
"resource_version": "ENC[AES256_GCM,data:j+g5u87DQR0V,iv:bIOfUiIFxrlQrg7GYWeJsRYtVYWaT3CciCDZKeoH/A4=,tag:+Gjt16tfj/kJ7bdPAt0hVw==,type:str]",
"uid": "ENC[AES256_GCM,data:Y1EAtr80GKn63VaRY8V0noOPjW8HDjt1NmyWHBAzlhqhIhRR,iv:5fjBcrn+lbkXMockv3IfnAKaZCARA8zfAHT88y32Ypw=,tag:z2dfRT1D1Q04rWk8QXlhcQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"default_backend": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ingress_class_name": "ENC[AES256_GCM,data:cwjJvKpSaw==,iv:BY9ouQTrzR5ejtRjhPmXob1d2Kxvbt1IWRKsUtt5kTw=,tag:OCDpg8oT3jri2+F1X3mudw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"rule": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host": "ENC[AES256_GCM,data:7xyZ3GGc2nol0EXAv/Mc6BicWyqrCeAWfA==,iv:WhewsMaYgG5Zb4axfeAtSW6GpX+afKbmM7QfClggF30=,tag:oyfyXGsSkJz8S6yWTIExkw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"http": [
{
"path": [
{
"backend": [
{
"resource": [],
"service": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:ObrlFXKLOTa2j37F9PLSslv1,iv:zhHMsYMSE4m6ZMgMkSmXhW8H963q+bB35cDCN0itL3I=,tag:x+GzMZ/qEhzFo8ezZOnbWA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"number": "ENC[AES256_GCM,data:NEQ=,iv:uTl0ba+wSN36oSly8mAdAvEIUGeXL3TueOlDxt6omfI=,tag:PPljeJCGmmREl4VV1kJlYg==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:/A==,iv:CB4k6u306VG5+Peq8UEUfLTt5vzdSE/fs2VMCWt1Yr8=,tag:WQ1CCeYk0nSDXPIAJm/0UQ==,type:str]",
"path_type": "ENC[AES256_GCM,data:rSiWqkvtF9nDsmyA4N9nXf1tqjzfqw==,iv:sHpO/g5AwZsWAPOdAqx8BfMSl2O0jKEYZ2WlchH/51o=,tag:daC3oK0/weBJ3Z8/3oPHww==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"tls": [
{
"hosts": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:TgQxVkwF5xsQXwKTW7Zx0g5oQAO4b8Qu/A==,iv:ibwIczfDeZAdbz/Mt0CQ0B7Xrdea4sUgkE55mrCueas=,tag:fCCV4KqBd/r8IIUUiHhZIQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"secret_name": "ENC[AES256_GCM,data:b+JEFyYvZTOM3Q==,iv:lhhfE9oJd21UDXjjN8ZqNJgDchc0X7pYQjtI4nnptX8=,tag:dAXNp0C7Dh7EuPa+Qg2ZMg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:GDodCZhvVP41n5E=,iv:1eluBIXpBGE3nIhYcL7yv0hACEmBvPPsHP9RU81YCco=,tag:BDZFyy70ObNtWpLKtjPg0A==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
"wait_for_load_balancer": null
},
"sensitive_attributes": [
[
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:R3BQywAdFBU=,iv:qNOiUCMisY3bx8O24KGgB1uNgTqN82uiSjzAMdl0btw=,tag:ahqEJJkmLLtLzAss0BDiPQ==,type:str]",
"value": "ENC[AES256_GCM,data:QYqxsMHzTiM=,iv:r9w8daYkqvx24cEm1K3pUhYAqv4YHWTe38F96Zi32lQ=,tag:d0QhpcDZf3mnkDSs0MZu3Q==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:liTD3mg=,iv:OnWsQaGbKCwMjycUQTHPA8n5do3/WQtlPS1RKUNMCqU=,tag:2Gpm9k87W1hjoZhJe6YTFQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:iQ==,iv:SyHaZ6asIEqAkQ8K7AWFKDol/ZslzF3jtsT0P0ogfII=,tag:DCBVssOE8JmHGFAJnyEYvg==,type:float]",
"type": "ENC[AES256_GCM,data:c5rtkPhu,iv:yoo6foJGngIaLn3S5//qOnn3ChK/LEJ/TytRAIVhayw=,tag:t5m5qW4cK6RdYRA1hgzEtQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:LOp8xtwC/to=,iv:nNn4fnULnXrG3uF9npPwdM7W+rE7+clXkhbBnrveR8c=,tag:aQAuWMNErcT49J++jUBcJQ==,type:str]",
"value": "ENC[AES256_GCM,data:dNcpFBGpla0Pt60=,iv:EU/vWaB5gQPXkcn95cTKHQ9KhBAUK93HHlnsSJXgR2w=,tag:lGOfpsN8Hy8EoQJN6MZiwQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:9gIgqHk=,iv:fshX5L2a7ERZkpasmRTgpi6OticIYkUBO3l6hTbhheo=,tag:saVTR25CtvnN9ZQRn4beVw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"value": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"value": "ENC[AES256_GCM,data:XuLeOMFdpH8RMmZIBQCm/IqCFiR0kkMB8qE=,iv:f7XtjdlNB+YJ0QDfmIqAWxwJ0Ka8LDtrfx08pB4Cg8o=,tag:rsoOtNVVMP8kJNI4Wg0u8g==,type:str]",
"type": "ENC[AES256_GCM,data:YKfv5LGd,iv:QVk0qHUbyDFJZAUFreU73xBeT7ZUYWjHkJ13Mi8cuF4=,tag:0gv0WF1XWXQONqTYLeiAnQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
}
]
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:tks8yPHPC7EAF9lmQhQiyTETOLbGIfV1IxTuqNfpWChMCWuXmycnR1Sv6+PC/OvhCQubpnRfyysbJgEP6mEBes28EzaERbHQkUVgkaO9UbkkThooWhTXEO6rs5OryoYtJt+TxgohAGU3PqghG/lzzLUBUKlSQ+8j,iv:0qAY+MsK5PrbGM6Pn2JshxeMoRzTspvjA8pCfZIRu7E=,tag:4Yt30v8Ublo5RMstiG4lCA==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:AP7k+hpN2eg6i5AOd4nFMIQVdaPLXdU79H34ZcpfaQ==,iv:pVlb3D5PYIkY5CPOJubfekGHK9bljfBBmJeLuy7mH3Q=,tag:57C4Q4lrOxlJRQ+etnpcBw==,type:str]",
"ENC[AES256_GCM,data:w97vbAJjItleKQmIPKjCOgvF3wnCrGrlmJYCxpupPkGroTgM/UZstEiHo5IZQio=,iv:fblw8GtIGmd1FZj8HYmLmlNTBv+BcLBqx6w/EyJeN/Q=,tag:6DnQHa6spOPmls8JqL6zCg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:YCf8weGhy6uY9rpVJqxOXv4WwMqy0Q3OnbsmTjoxXsiEsN8d8aSw,iv:XDFo7puW9WYPj0SAeEs9QbsahJRGdMIw+FdqJxv0FJ8=,tag:HHS+xPXt2itcSfQ7k8QvwA==,type:str]",
"mode": "ENC[AES256_GCM,data:bX+cRVSlZg==,iv:+6TKrwobQub0gmudrTEsbG57XbFSLeOby+KsbCc0ruQ=,tag:LTro/DhcEZ2s2bQPRvqWTQ==,type:str]",
"type": "ENC[AES256_GCM,data:e1+0jrfoKq/dzPlxfTuv7EjJNAVm,iv:FkEXnRlXHzzlWUpDISulpHGI5MBZ1Pp6vGwUtY0v4Zg=,tag:xUTbU72UmRGOTK9VwbuoDA==,type:str]",
"name": "ENC[AES256_GCM,data:IhAJGfb3GL8qPSI89Dqa,iv:Tq8yBNaUBI2zv6c+4FYe84uIdsMpw1qZ4kCZJrG2MSw=,tag:i1BXKlp90l9ImgZNNsxjUg==,type:str]",
"provider": "ENC[AES256_GCM,data:G/QCtXb5N44Lz2QUwrueXZE2QfaYq0yX9309ucFfOlZnG6aChJHShGZIXgW1aw7QVZiB6RHX,iv:8boUGyY3TDNIX3TTlJxSAYKosIsK1AKNJwZINRFBgAg=,tag:vsbLDAD2mW609s9DJbH89g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:hg==,iv:1G5HgZC5aKMnGeKzb7LkVbf3PYmTLSrprKA1aYGj09w=,tag:6pXqkWEJMBZgwXYnSXabQA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:HD7cmE9d5ZcCrAB36zNM79DSkLJCs2H6XCd1,iv:9Ac6HQHjub9+85K0hOmiwCM2gEhTy73dfkM/jEMMJiU=,tag:ITvPK3L+5Dk1nwn3/TgVzQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"traefik.ingress.kubernetes.io/router.entrypoints": "ENC[AES256_GCM,data:R9kHo97obXH+,iv:NCUown3SVBuhzCBNH/466lwxOgaTQTsj+2iNR/F+/Bs=,tag:DgrMvAElBX1mGMeer5cNAg==,type:str]",
"traefik.ingress.kubernetes.io/router.middlewares": "ENC[AES256_GCM,data:Qa6YqWGh4j30n6GIbE4VQB0WbOm2qwgZmRG6BnAHsUkUO8euv/hfROHk2vPMXxUNmvbAVbUf/elo0BSAkVg/8zMymDyvPWtikG4OjKmm27dC01I8yc0vZC21rN8bSmt8q5SRdZNBWbnQKznPIw656r0/7RQtGNXJdGbs4rokuXB95TFfrOfwtv1+RUdYL9aRkm+lwDC7A0wRYUrbdes21xPcyJSnfHMnteXu60ZreICzg9SzTQ9gC+fbAEV8CBFkToAIS5OJ0DQRhrHyFT4SLpy1QcQPS3+3Ve3ehc23oI8rPrOi6wml2hS5ap8AcQb6Mt326/FD2X5n683kKxTsXlVjck0z6nHudPmhvY/2T6wiH3gP/+BHmA7KIA==,iv:Ajw6EoVXkY4S7D15GnKncLqgChJVn1bvzNdYL3gK4DY=,tag:9lO9YMnys1QS9G1O3M23fg==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:XQ==,iv:ra98+S5IXc9XI9zbP1wHBlT639+6gyzhY+28XVWYC0A=,tag:cjFGkpOcAe0Qzy1u0XEJ/g==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:4wAolsjYINDdAgTpJ+yr0kI=,iv:WyrXJbpVtlGJEp9nUupyw9cXzv3wnUeRwSIFFmhuDto=,tag:DnYN/TSpRlcMGqSykV0PeQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:bO4f6Ly+4T/j,iv:2d3VQ2jPPBE/yYstogYpxJK61u1ZDf+e8X4BQaZubZ8=,tag:5srH36z+lG3gqkJXk061Rg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:RzCRrqPo0hxL,iv:Z6qzxaGdChg7tLCQPExfRSLcN3svVMiSKndi9MBxvAc=,tag:dby6aSHe5h5c+z75fGAvsw==,type:str]",
"uid": "ENC[AES256_GCM,data:ORlj6r0CKxaXeUBspW1AGgN4bdZRNHONQDEBYhZDkYWpJzxs,iv:7tQR0RcwaGrDal69lmmr7PZ5uwT87Ftj374Yoefp+JI=,tag:f+QKRrYj5plBTkJoRHslUw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"spec": [
{
"default_backend": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ingress_class_name": "ENC[AES256_GCM,data:UzPqsbz9zQ==,iv:enDcnytQA6mA+GR0mg5rYp2auFjHPXaVmR/kGoOmlCY=,tag:xfLjXS9M5oOnu1Dk6fmE4w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"rule": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"host": "ENC[AES256_GCM,data:djFDZS8OefZR6cAYd/m+AIY3FgE7RfXhsA==,iv:TR5emOAGVD9HnTuizbnUsdM0S1B46Ucd+PmR6+7f5kk=,tag:nNpJdPP1pfmIR1x4qvQ29g==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"http": [
{
"path": [
{
"backend": [
{
"resource": [],
"service": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:Te1CTHHT4lnVb2bzwrG+WkxWLp4rcZEKdglGpsip9oW7ctQxzw==,iv:IBB8t3mPCHAqWKAzTbR3EPrZ64BjnmLg2qOlGBxy560=,tag:8bjNU16FxADfJDvHfy12Ow==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"port": [
{
"name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"number": "ENC[AES256_GCM,data:MUzpsA==,iv:dskbOwAwllqKlX0wK9StrftKnYsaU5LY4/mQLxHqtjY=,tag:oH46yDBb40+V3zWpZMrYQQ==,type:float]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"path": "ENC[AES256_GCM,data:IVHj57ZwUrcByf2riEbm3dIJWOvBYVU=,iv:g60ef+wlbfFRnKi5DptVoe4kZe66AuSwUJQWK7PGbhI=,tag:yAWcAyqjqzAB7u8jX0KN5g==,type:str]",
"path_type": "ENC[AES256_GCM,data:23L06Mi3fN0abY7ngHGJO0Slf0lSow==,iv:15ukaeUBym/wb+qkRF5dOBP8Hw8XJqvo3zfM7I19j14=,tag:rJs+HAV7MgAcWT2uyoN6jA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"tls": [
{
"hosts": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:T/fEOmCfIVMTKKYxBFz1Xzp/YGqViVxaew==,iv:rP7KHPIybfyJ3Kbgr+IB86VNiJglKRqYBAa6McNIL5I=,tag:82Qp5VEODcXXmJg/j45QIQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"secret_name": "ENC[AES256_GCM,data:1VQzYjQZmNxQ4A==,iv:on2d8FhYvTaDnT0eoCaqi9nstCkNfE1QopzShmHVeIA=,tag:sSvSDyLkNZpRFV0Hc0LbKA==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
],
"status": [
{
"load_balancer": [
{
"ingress": [
{
"hostname": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ip": "ENC[AES256_GCM,data:3g/2LGG6APgeOT4=,iv:slsEJMpn4yXDk3HCXpGsEkVAPa+kXxb7a8U1Zy6lcVA=,tag:I2x3r0zMZgt8m/7mcUwNOw==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
]
}
]
}
],
"timeouts": null,
"wait_for_load_balancer": null
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:H4W7PNMoWhvRnNEN/0GdpTKD7t3r68a7WN1Li4JWBg1aqKAexmvqE4p+ze8q02wAjTcqHdeJ9hDtqUG2uIDQ17MGqLTHogU3TRU4f1cA6bA4SfVkqfkL8YNp972c4QdErmK8mSfdgO3v4C+cdDkWxp1JL0MNMKXK,iv:C1HWrvTI4IExmrEv6KCxn9z+X5YwMF+rju6VlFQtD4o=,tag:1me3RBWbvKzcSU4q6Wxw4w==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:oUiDzwv+JM1zDk3txevK5EClBbktAc15HZzEntHdmr+im5YGspdUIFfHgO4JP1M=,iv:JJfyutw2oTBKInBw3kzX4sw/OWDNY6IUd9O6we8c7xw=,tag:ymd1ptvkVdq4LzToTj02ig==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
},
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"module": "ENC[AES256_GCM,data:o35+4cAQsV5eoEHUUUgMtBCGT1YHvKFtI1x1ajpibKN26g==,iv:p/+ie6GF1Gb0JTjeKmNxZE0iH5/oVZvHez4tH5t1mg4=,tag:WGCjNmnCKoaGJmz9Xx5OIw==,type:str]",
"mode": "ENC[AES256_GCM,data:B7NWmgbLlA==,iv:H2ShFvIvOV50v6r2uWcQ0ycus2JFJDo/bBr96qwKFUI=,tag:NQPfqPBZ05AnxCCHdqoN4Q==,type:str]",
"type": "ENC[AES256_GCM,data:0QCSuOhCCe8Kn1j67DuHyfo=,iv:+gAXhuzGF06N3wFw04YpAcRreTnT4bYQNCrbaPdyRF4=,tag:JW58nC+T+HZZm6Zg+q8ePQ==,type:str]",
"name": "ENC[AES256_GCM,data:cQe/MGaDJbMn4w==,iv:hzntWoXf6KnSf/MDFoW5OoWewMzjRlhzF35gzD5NKL8=,tag:+N4W0CYwboxEmm9w9pBl2A==,type:str]",
"provider": "ENC[AES256_GCM,data:uxw5J9Bda9lQGhM17docAQ+jPZVLbo3ojPnfeyG8JQ+bgXYWxh+rGd1hC/pQyUIJxi7iRhU3,iv:d+vhNibUGfTcRyURZnOJLtR+JVcT1qmfDxblSWdvPDw=,tag:suUY8FX5dw9TKKCYK4NyRw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"instances": [
{
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"schema_version": "ENC[AES256_GCM,data:Qw==,iv:wTDNVmvJLKaGOZ3Ja9KHlJCJyRt9gPOnPkGDlUi+gdg=,tag:MD84LTVdjFOcJDzSNI6fqQ==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"attributes": {
"binary_data": null,
"binary_data_wo": null,
"binary_data_wo_revision": null,
"data": {
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"tls.crt": "ENC[AES256_GCM,data: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,iv:Bra0YruvPRNhOMJPGSuQdXg9z3Elyy4JIhf2L6HG0fc=,tag:6Inz9/NFmriTocSdaBDAqA==,type:str]",
"tls.key": "ENC[AES256_GCM,data:d9nXFAsq66wJuw/j7Di8MW6iVVI6NYZ67TJ0diIAPNCJlSeHl6pXh3PEoBlqMCmjGfV6/DY24AXzFSsR8OaZDHBA7ri/7Y8w/5FVNpQNl9e7BhVcVy2K6M6vW4dr04PIJjnx8H5b55Zzxbdb+pZgfivSTjX72BR57pYCNYhwbQeNiJGGPYSB2y3MEaw3NhJ/mqkoh3HRxTKrvjWDQASevM+QVkpA8dnfMQZcOdInhkVNYHlQvuX1lalCT4Iqjsjz5O3shw1+LxJk6k3y6G+nBYVCxjfwVSnm+DqQfd3CO2eCU8YTtjxIaLkzSSiUSJfMHA==,iv:gS60K2LzI0hn6GwWQ0FIaB1KQYMTtV5wfhJaN6iIHEU=,tag:MAIWdYO35X5G5rfWR7vRZQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"data_wo": null,
"data_wo_revision": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"id": "ENC[AES256_GCM,data:VpddVPjzM+DA79IUsDVxf3zkdNg=,iv:VZ/8A0oK3SWg+BOFfHnN2IaMwUuVX2Pqo2lV9kn2RoA=,tag:bMkgzS0dlAw0oFeg7606Pg==,type:str]",
"immutable": "ENC[AES256_GCM,data:eel3DP0=,iv:2CiS7f5tk8o8MFDPLlI1YTX8kRwbUQGjM5Cl2Pz1nKA=,tag:UHRI7lNgFmPOZL8GQUw6ow==,type:bool]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"metadata": [
{
"annotations": {},
"generate_name": "",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"generation": "ENC[AES256_GCM,data:ZQ==,iv:AadyQfLF6ijaHojaieUBLsiB1uIc4ihur9xneRuFx6s=,tag:X15Djd3cQiRyNaE9RxeZbA==,type:float]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"labels": {},
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"name": "ENC[AES256_GCM,data:F1HMLqbsqRrBvg==,iv:MUy7BihnLq76KaQmFGvxzdgGeoSA+PBYbhAXhS1A2XM=,tag:95PqUJcP0Gu+Qcp8FuJdFQ==,type:str]",
"namespace": "ENC[AES256_GCM,data:qliNIc+pnwW9,iv:IDFZI1BXnekt9URBylRAKYpOcXT/QV6+3sp8EKZLEuk=,tag:cG5W0eYiHE6yjFXh43RjTg==,type:str]",
"resource_version": "ENC[AES256_GCM,data:s3+3FETxC8AR,iv:sGwhqWep3sIf12KMBgznw1kpnglD11NZyczkvhdo6xE=,tag:lgmTk3k2V7TLHCS3L+osRw==,type:str]",
"uid": "ENC[AES256_GCM,data:a5/mzU6bfyPC+nHRPYSOP/PRLmEEgaQz6NMKrwIzj3Ah/7wl,iv:+M9TgzoKadhUc1FFt8jx24FykwjbfYNmUHQ24Q34b/8=,tag:0ZdQMvVwzLagjgLKAYdE4w==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
"timeouts": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"type": "ENC[AES256_GCM,data:6mfDRYOBAB5D1PdlhkmHHq8=,iv:zhz0U9EFgHcUrovK6bZL+nfJbQQXv3bgt8R4hOCZTx0=,tag:ioylpspL9SZSAr9/upChjA==,type:str]",
"wait_for_service_account_token": "ENC[AES256_GCM,data:QwmP7g==,iv:vYTW8R3tjgfeDPkGzzUvOzE0kTQ4lLyWJSSIVuFjYAc=,tag:Bvxx0kLW0gmfojBvIShH6w==,type:bool]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
},
"sensitive_attributes": [],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"private": "ENC[AES256_GCM,data:EoZUH9IOoiTHeijZ6DMva6OKmM5YpWNrrZZTiBKZAGAFZL7440SfvZ+yIq7QNBowAnDzfh8Kh1Y4pkYhOo84vASywr3qUutsjZ3IVo0onB04y1zd,iv:lWN1IkUCjp3CTYbylc5UVUR/R/7A9vkVMiqRgpeUzmY=,tag:vcPvxxG4/dV5YskSrSiqqQ==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"dependencies": [
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"ENC[AES256_GCM,data:fyqFXMEjfheDWf/ku+FyhvS8B6SvqqWz6sEzt5LOUJrBXem3v1WrxUDXAWkkFM0=,iv:kEzuqRD3Q+0J2XGp+EMIg97URYEY1oIcdETwjhuj59g=,tag:CLvzl2TOqhonhE6ljGNwmQ==,type:str]"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
]
}
]
}
],
"check_results": null,
"sops": {
"kms": null,
"gcp_kms": null,
"azure_kv": null,
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"hc_vault": [
{
"vault_address": "https://vault.viktorbarzin.me",
"engine_path": "transit",
"key_name": "sops-state",
"created_at": "2026-03-17T22:55:10Z",
"enc": "vault:v1:TXqrp5USUuqVcrvfVS+czVEpjaJNugfh7dCL4NhGMarL3iUN3TIoBb2oUZ08b4Y1nlUKSxaTIvmmLZFu"
}
],
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"age": [
{
"recipient": "age1z64h9t3acsm2rr74pz7j4846kwj5tutx9sk78jqv46y8fln4vs2sy920ce",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRdWlILzJhdG1ldkRseSty\nZkVsWmVKQVd2RzEwaVduZUsybXRmalIwbXpVCk9nZzl3S2pvRXN5bmN5L3hibkMy\nUUFNQjJMNnl5b3FNWndIMDNNSlVkbW8KLS0tIEVqVVVlbnVOK3ZPSGNCSHBNZ2dC\nTEtsOUliS05NdG9sMGE2amx1ZTRsbVUK8S8My3LwNFRFHwSzot/iS37PL17DCKfh\nfPYWkl5sGngIw7RYjAOrGdoC4uFG3xBdnL4NdOdXr1VHYdwk0vMwCg==\n-----END AGE ENCRYPTED FILE-----\n"
state: add devvm as SOPS recipient Add devvm age public key to .sops.yaml and re-encrypt all 101 state files with both laptop and devvm keys.
2026-03-17 22:41:19 +00:00
},
{
"recipient": "age1rekkad48r2wzhwqgfetw5yugu3ln3qlht4xg3txmx55tee8cveess60r90",
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA3UjRLUHM5TlJiZ2lnQXFj\naWJtb0dUNFg3eGx2QUhlSFQ4cjJBeGRWTUE0ClU3ek5zL3V3K3lQTklRelBtNlJa\nYU1CbFJ6T0pWS2JCT3MzTTFaZGcrT00KLS0tIGd3USt4bVJHSmhTMmJUVUtHcWU2\nRkRWRTYvaDBCVm5kdWlHWitNNGRSZm8KAIML93Q6B+AHBokBR8lPbE5EGKDRbQqn\nK8GFvJtaHd381qCw/zcDGlBCBZEbGr2wS9tdVbtWLVzr5EevFgwKdg==\n-----END AGE ENCRYPTED FILE-----\n"
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
}
],
state: add Vault Transit as primary SOPS backend, age as fallback - .sops.yaml: add hc_vault_transit_uri for transit/keys/sops-state - state-sync: try Vault Transit first, fall back to age key on disk - Re-encrypted all 101 state files with both Vault Transit + age - Normal workflow: vault login → decrypt via Transit (no key files) - Bootstrap/DR: age key at ~/.config/sops/age/keys.txt
2026-03-17 22:56:33 +00:00
"lastmodified": "2026-03-17T22:55:10Z",
"mac": "ENC[AES256_GCM,data:loEgbL9Y1ZQkvwWEA7/bMEUQXW/zsNLo95I4i8TLkaa4Y7i837OjmDkz8Bl/H48D7CCOPcx5SQ5Mg1s5HGhUkP1/WyipHpI1xTWlw6Eh0GXg10nw7H8Fc+CNM1sCmBlqkzdKhQNKTQ7G5fjpAsrxDaI+0UacaI2hE1yaXqlH/f8=,iv:fjoB1E1qdSfpR53mvPRlYH706HersMKciscjXVgpF3w=,tag:VKIcYGTBHsWtDxN5R3+rqw==,type:str]",
state: add SOPS-encrypted terraform state to git - SOPS + age encrypts all 101 .tfstate files (JSON-aware: keys visible, values encrypted) - scripts/state-sync: encrypt/decrypt/commit wrapper - scripts/tg: auto-decrypt before ops, auto-encrypt+commit after apply/destroy - terragrunt.hcl: -backup=- prevents backup file accumulation - .gitignore: track .tfstate.enc, ignore plaintext .tfstate - Cleaned 964MB of stale backups (state/backups/, .backup files)
2026-03-17 22:37:56 +00:00
"pgp": null,
"unencrypted_suffix": "_unencrypted",
"version": "3.9.4"
}
}
Reference in a new issue Copy permalink